OWASP Top 10 for LLM Applications 2025 OWASPLLM-6: Excessive Agency and Unbounded Consumption (LLM06 + LLM10)

Address OWASP LLM06:2025 Excessive Agency + LLM10:2025 Unbounded Consumption. Excessive Agency occurs when an LLM is granted too much functionality (excessive functions + permissions + autonomy) such that compromise causes outsized impact including unauthorised actions + data modification + resource consumption + financial impact. Unbounded Consumption occurs when LLM systems consume excessive resources (compute + tokens + external API calls + cost) enabling DoS + cost amplification + denial of wallet attacks. Mitigations for Excessive Agency include (a) limit LLM functions + permissions to minimum necessary + (b) implement human-in-the-loop approval for sensitive operations + (c) implement strict allowlists for LLM-callable tools + APIs + (d) avoid open-ended autonomous action chains + (e) implement audit logging for LLM-initiated actions. Mitigations for Unbounded Consumption include (a) implement rate limiting + quota management + (b) implement cost monitoring + alerting + (c) implement timeout + resource limits + (d) implement circuit breakers + bulkheads.