llm-audit good first issues (JavaScript)

Rule idea: prompts and completions written to logs 18 days ago

enhancement help wanted

3

Static analysis for TypeScript / JavaScript LLM-application code. OWASP LLM Top 10 at commit time. A complement to Semgrep's p/ai-best-practices for the TS/JS ecosystem.

JavaScript

#ai-security#javascript#llm#llm-security#owasp#prompt-injection#sast#semgrep#static-analysis#typescript

New rule: fetch of a URL the model chose (SSRF) 18 days ago

enhancement help wanted

Javierlozo/llm-audit

3

Static analysis for TypeScript / JavaScript LLM-application code. OWASP LLM Top 10 at commit time. A complement to Semgrep's p/ai-best-practices for the TS/JS ecosystem.

JavaScript

#ai-security#javascript#llm#llm-security#owasp#prompt-injection#sast#semgrep#static-analysis#typescript

New rule: model-chosen tool arguments reaching exec, eval, fs, or SQL 18 days ago

enhancement help wanted

Javierlozo/llm-audit

3

Static analysis for TypeScript / JavaScript LLM-application code. OWASP LLM Top 10 at commit time. A complement to Semgrep's p/ai-best-practices for the TS/JS ecosystem.

JavaScript

#ai-security#javascript#llm#llm-security#owasp#prompt-injection#sast#semgrep#static-analysis#typescript

Cover LangChain.js prompt templates in untrusted-input-in-system-prompt 18 days ago

enhancement good first issue

Javierlozo/llm-audit

3

Static analysis for TypeScript / JavaScript LLM-application code. OWASP LLM Top 10 at commit time. A complement to Semgrep's p/ai-best-practices for the TS/JS ecosystem.

JavaScript

#ai-security#javascript#llm#llm-security#owasp#prompt-injection#sast#semgrep#static-analysis#typescript

Javierlozo/llm-audit

Open Issues Need Help