 How to Prevent The following actions can prevent Excessive Agency Limit the plugins/tools that LLM agents are allowed to call to only the minimum functions necessary.  For example, if an LLM-based system does not require the ability to fetch the contents of a URL then such a plugin should not be offered to the LLM agent Limit the functions that are implemented in LLM plugins/tools to the minimum necessary.  For example, a plugin that accesses a user's mailbox to summarize emails may only require the ability to read emails, so the plugin should not contain other functionality such as deleting or sending messages Avoid open-ended functions where possible (e. g. , run a shell command, fetch a URL, etc) and use plugins/tools with more granular functionality