llm-app-security
Secure LLM-powered applications with input validation, output controls, tenant isolation, and abuse prevention.
来源信息
- 仓库
- Njones17/AI-agent-master-cyber-skills-list
- 最近来源活动
- 2026年3月6日 16:13
- 检测到的 SKILL.md 语言
- 英语
- 星标
- 23
- 分支
- 6
安装方式
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
检查来源文件
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
正在显示 SKILL.md
SKILL.md
来源说明 · 只读预览- name
- llm-app-security
- description
- Secure LLM-powered applications with input validation, output controls, tenant isolation, and abuse prevention.
- license
- MIT
- metadata
- {"author":"devops-skills","version":"1.0"}
# LLM Application Security
Harden chatbots and AI features embedded in web and mobile products.
## Baseline Security Checklist
- Validate and classify all user-provided context.
- Separate system prompts from user content strictly.
- Add moderation for toxic, harmful, and policy-violating outputs.
- Enforce tenant boundaries in retrieval and memory layers.
- Rate-limit high-cost endpoints.
## Secure RAG Pattern
1. Ingest content with malware and secret scanning.
2. Tag documents by tenant and access policy.
3. Filter retrieval candidates by user authorization.
4. Add provenance metadata in final responses.
## Related Skills
- [ai-agent-security](../ai-agent-security/) - Agent-specific controls
- [sast-scanning](../../scanning/sast-scanning/) - Secure coding checks
在 GitHub 查看