OWASP LLM02 — Sensitive Information Disclosure
ProprietaryOWASP LLM02 covers personal, financial, credential, and confidential business data leaking through an LLM application, whether into the model, out through its responses, or into logs and other users' conversations. Coverage here focuses on sensitive values reaching a prompt, prompts and completions written to the log, tool arguments/results exported into traces, chat memory shared between users, and model endpoints reached over cleartext HTTP.
org. openrewrite. ai. security. OwaspLlm02mod run . --recipe= org. openrewrite. ai. security. OwaspLlm02Install it once from Recipe actions, then run it on every repository under the current directory. New to the Moderne CLI? Set it up.