Address OWASP LLM01:2025 Prompt Injection + LLM07:2025 System Prompt Leakage. Prompt Injection occurs when attacker input causes the LLM to act outside intended boundaries via direct injection (user-supplied) or indirect injection (through retrieved data + documents + tools + multi-modal inputs). System Prompt Leakage occurs when the system prompt + instructions + sensitive data embedded therein become disclosed to users or attackers. Mitigations include (a) treat all user input + retrieved content as untrusted + (b) maintain clear instruction-data separation + privilege boundaries in prompts + (c) use input + output filtering for known injection patterns + (d) implement least-privilege access for LLM-invoked tools + APIs + (e) avoid embedding secrets + credentials + sensitive instructions in system prompts + (f) implement output classification + filtering against jailbreak + leakage + (g) maintain monitoring + detection for injection + leakage attempts.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.