OWASP LLM06 & LLM10 Avanzado 60 min

Lab 07: Uncontrolled Agents — Excessive Agency and Financial Attacks

Unconstrained tool calling, financial order tampering, Denial of Wallet attacks via token exhaustion, and Human-in-the-Loop (HITL) architecture with HMAC.

Key Lab Topics

  • Agencia Excesiva
  • Denial of Wallet
  • Human-in-the-Loop (HITL)
  • Tokens de Aprobación HMAC

Prerequisites

  • Python 3.10+
  • Crypto / HMAC

Resources & Architecture Guide

This hands-on lab runs in a Jupyter Notebook (lab-07-agentes-descontrolados.ipynb) and includes a comprehensive architectural guide:

Read Architecture Guide →