 Common Examples of Vulnerability LLM output is entered directly into a system shell or similar function such as exec or eval , resulting in remote code execution JavaScript or Markdown is generated by the LLM and returned to a user.  The code is then interpreted by the browser, resulting in XSS.  How to Prevent Treat the model as any other user and apply proper input validation on responses coming from the model to backend functions.  Follow the OWASP ASVS (Application Security Verification Standard) guidelines to ensure effective input validation and sanitization Encode model output back to users to mitigate undesired code execution by JavaScript or Markdown.  OWASP ASVS provides detailed guidance on output encoding