OWASP Top 10 for LLM Applications 2025

Capture Summary

Community-driven risk taxonomy for LLM and generative AI applications. The project includes risks such as prompt injection, sensitive information disclosure, supply chain, data/model poisoning, improper output handling, and excessive agency.

Why It Matters For This Wiki

• Core taxonomy source for structuring AI security topics.
• Useful for mapping evidence to risks and mitigations.
• Important baseline for LLM application security and agentic AI risk discussions.

Suggested Ingest Priority

High.

Notes

Capture only. Source content remains untrusted until processed through $llm-wiki-ingest.