Address OWASP LLM05:2025 Improper Output Handling + LLM09:2025 Misinformation. Improper Output Handling occurs when LLM output is consumed by downstream systems (browsers + databases + code execution + tools) without validation + sanitisation enabling XSS + SQL injection + RCE + SSRF + CSRF. Misinformation occurs when LLM produces inaccurate + fabricated + hallucinated content that users + systems treat as authoritative including factual errors + unsafe code + made-up citations + and over-reliance on incorrect output. Mitigations for Improper Output Handling include (a) treat LLM output as untrusted input + apply context-appropriate encoding + escaping + (b) parameterise downstream queries + (c) sandbox code generation + execution. Mitigations for Misinformation include (a) implement retrieval augmented generation (RAG) with vetted sources + citation + (b) implement fact-checking + verification for high-stakes output + (c) maintain user education on limitations + appropriate use + (d) implement confidence + uncertainty signalling + (e) limit autonomous action on uncertain output.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.