insecure-plugin-design

What problem does it solve?

Prevents unsafe plugin and tool design patterns from being deployed by LLMs, addressing prompt-injection risks and misconfigurations in tool schemas and handlers.

Core Features & Use Cases

• Enforces strict input validation at the tool boundary using explicit schemas and runtime checks to ensure only safe values reach handlers.
• Verifies internal authorization inside the tool handler and enforces narrow tool capabilities by separating read, write, and delete operations.
• Provides guidelines for safe plugin design across function schemas, middleware, and tool integrations to reduce attack surfaces in LLM-powered plugins.

Quick Start

Inspect your existing tool definitions and apply inline validation, per-tool authorization, and audit logging to prevent prompt-based exploits.