 The root cause of Excessive Agency is typically one or more of: excessive functionality, excessive permissions or excessive autonomy.  Excessive Agency can lead to a broad range of impacts across the confidentiality, integrity and availability spectrum, and is dependent on which systems an LLM-based app is able to interact with.  Common Examples of Vulnerability Excessive Functionality: An LLM agent has access to plugins which include functions that are not needed for the intended operation of the system.  For example, a developer needs to grant an LLM agent the ability to read documents from a repository, but the 3rd-party plugin they choose to use also includes the ability to modify and delete documents.  Alternatively, a plugin may have been trialled during a development phase and dropped in favour of a better alternative, but the original plugin remains available to the LLM agent Excessive Functionality: An LLM plugin with open-ended functionality fails to properly filter the input instructions for commands outside what's necessary for the intended operation of the application