AI and LLMs · Middle · Question 20 of 75
What is "excessive agency" in the OWASP LLM Top 10?
- 1An LLM writing answers that are much too long
- 2Giving an LLM too many tools, permissions or autonomy
- 3Too many people being allowed to edit the prompts
Show the answer
Correct answer: Giving an LLM too many tools, permissions or autonomy
Explanation
If an injected prompt can make the agent send emails or delete data, the damage is large. Limit tools, scopes and require confirmation.