 How to Prevent Plugins should enforce strict parameterized input wherever possible and include type and range checks on inputs.  When this is not possible, a second layer of typed calls should be introduced, parsing requests and applying validation and sanitization.  When freeform input must be accepted because of application semantics, it should be carefully inspected to ensure that no potentially harmful methods are being called Plugin developers should apply OWASP's recommendations in ASVS (Application Security Verification Standard) to ensure effective input validation and sanitization.  OWASP. org 21 | OWASP Top 10 for LLM v1