Classification
2- Complexity
- Medium
- Impact area
- Technical
Model-generated content is passed downstream — into a shell, a database query, a browser, another agent — without adequate validation or sanitisation, so the model's text becomes an execution path.
360° overview
Six perspectives place the building block in context. The numbers show where each perspective continues in the reading path.
The building block at a glance
Improper Output Handling
360°
Integrations
Treat model output as untrusted input.
+2
Model-generated content is passed downstream — into a shell, a database query, a browser, another agent — without adequate validation or sanitisation, so the model's text becomes an execution path.
Value stream stage: Run