# LLM App Security

> Secure LLM-powered applications with input validation, output controls, tenant isolation, and abuse prevention.

- Skill: `majiayu000/llm-app-security` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add majiayu000/llm-app-security`
- Raw SKILL.md: https://api.skillmd.com/api/skills/majiayu000/llm-app-security/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- License: MIT
- Author: majiayu000 (https://skillmd.com/u/majiayu000)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/majiayu000/llm-app-security

---


# LLM Application Security

Harden chatbots and AI features embedded in web and mobile products.

## Baseline Security Checklist

- Validate and classify all user-provided context.
- Separate system prompts from user content strictly.
- Add moderation for toxic, harmful, and policy-violating outputs.
- Enforce tenant boundaries in retrieval and memory layers.
- Rate-limit high-cost endpoints.

## Secure RAG Pattern

1. Ingest content with malware and secret scanning.
2. Tag documents by tenant and access policy.
3. Filter retrieval candidates by user authorization.
4. Add provenance metadata in final responses.

## Related Skills

- [ai-agent-security](../ai-agent-security/) - Agent-specific controls
- [sast-scanning](../../scanning/sast-scanning/) - Secure coding checks