owasp-llm-top-10

name	OWASP LLM Top 10
description	Comprehensive knowledge of the OWASP Top 10 for LLM Applications (2025), including attack mappings, detection methodology, and remediation checklists
version	1.0.0

OWASP LLM Top 10 Reference

Purpose

Provides expert knowledge of the OWASP Top 10 for Large Language Model Applications. Used by agents to understand vulnerability categories, map attacks to standards, and produce standards-aligned reports.

When to Use

• When mapping scan findings to industry standards
• When producing compliance reports
• When prioritizing vulnerabilities
• When the user asks about OWASP LLM categories
• During attack planning to ensure coverage

Categories

ID	Name	PromptArmor Coverage
LLM01	Prompt Injection	jailbreak (13), injection (5)
LLM02	Insecure Output Handling	other:hijacking, tool-abuse
LLM03	Training Data Poisoning	rag:poisoning
LLM04	Model Denial of Service	other:reasoning-dos, other:divergent-repetition
LLM05	Supply Chain Vulnerabilities	— (out of scope for red teaming)
LLM06	Sensitive Information Disclosure	pii (4), harmful:privacy-violation
LLM07	Insecure Plugin Design	tool-abuse (12), agentic (3)
LLM08	Excessive Agency	agentic:goal-misalignment, tool-abuse:privilege-escalation
LLM09	Overreliance	other:hallucination, other:overreliance
LLM10	Model Theft	— (infrastructure concern, not red team testable)

Reference Files

• LLM01 - Prompt Injection
• LLM02 - Insecure Output Handling
• LLM03 - Training Data Poisoning
• LLM04 - Model Denial of Service
• LLM05 - Supply Chain Vulnerabilities
• LLM06 - Sensitive Information Disclosure
• LLM07 - Insecure Plugin Design
• LLM08 - Excessive Agency
• LLM09 - Overreliance
• LLM10 - Model Theft