AI agents read web pages, tickets and files, and any of them can hide instructions. That's prompt injection, the #1 risk in the OWASP Top 10 for LLM Applications.
I built a policy layer that sits between an agent and its tools and stops those instructions from turning into...
Teams running LLM features in production watch the bill climb and can't say why. Which feature is driving it? Which model? How much goes to retries? Most optimisation advice is a percentage nobody actually measured.
llm-audit is a command-line toolkit I built to answer those...