مخرجات النموذج مدخلات غير موثوقة

في هذا الدرس

handle model output safely.

الموضوعات المخطط لها

• Treat output like user input: validate, encode, never execute.
• Ask for structured output (JSON) and validate it against a schema; reject what does not fit.
• Encode before putting it into HTML; never inject it into SQL, shell commands, or file paths.
• Do not let output decide privileged actions directly; check permissions in code.
• Excessive agency: give the model few tools, with narrow rights, and require confirmation for risky ones.