OWASP LLM06 — Excessive Agency

Proprietary

Inventory tool registrations for review of least privilege, tool scope, and human approval before consequential actions, and find explicitly enabled Spring AI tool resolution fallback. Registration or fallback configuration alone does not establish excessive agency.

org.openrewrite.ai.security.OwaspLlm06

mod run . --recipe=org.openrewrite.ai.security.OwaspLlm06

Install it once from Recipe actions, then run it on every repository under the current directory. New to the Moderne CLI? Set it up.