What OWASP LLM Top 10 LLM07 - Insecure Plugin and Tool Design in LLM Applications - Compliance Obligations for LLM Plugin Security Controls, Tool Permission Governance, and AI Extension Trust Boundary Enforcement requires
This node outlines compliance obligations for securing plugins and tools in LLM applications as per OWASP LLM Top 10 (LLM07), focusing on plugin security controls, permission governance, and trust boundary enforcement, with overlapping requirements under the EU AI Act (Regulation (EU) 2024/1689, Articles 15 and 28).
Pillar: AI Governance & Law · Authority: OWASP Foundation · Version: 1.0.0 · Last updated:
Primary source: https://owasp.org/www-project-top-10-for-large-language-model-applications/
SHA-256 integrity: 19377503863c2bce7559ba49d601b1291955efd4ea2207d4b47e9f4f896be1ed
Primary Citations — 5 traced to source
- OWASP Top 10 for Large Language Model Applications - LLM07: Insecure Plugin Design, https://owasp.org/www-project-top-10-for-large-language-model-applications/, Section LLM07, 2023
- EU AI Act - Regulation (EU) 2024/1689, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689, Article 15 - High-Risk AI Systems, 2024
+ 3 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/owasp-llm-07-insecure-plugin-design.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/owasp-llm-07-insecure-plugin-design.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/owasp-llm-07-insecure-plugin-design
- Back to registry: Browse all 10,099 compliance nodes