لماذا تحتاج ميزات LLM إلى قائمة تهديدات خاصة بها

في هذا الدرس

see what is new about LLM risks compared with ordinary web risks.

الموضوعات المخطط لها

• A model cannot reliably tell instructions from data: everything in the prompt is text.
• Its output is unpredictable, so it must be treated as untrusted.
• The OWASP Top 10 for LLM Applications names main risks: prompt injection, sensitive information disclosure, improper output handling, excessive agency, system prompt leakage, unbounded consumption (verify the list).
• Old rules still apply: least privilege, validation, logging care.
• Threat-model the helper from JNR-056 the same way as the Shop API: assets, entry points, controls.