OWASP API Security Top 10, OWASP Foundation, 2023 (OWASP Foundation) - Provides a comprehensive list of the most critical security risks for APIs, including broken authentication, broken authorization, injection, and security misconfiguration, which are directly relevant to securing tools interacting with external systems.
OWASP Top 10 for Large Language Model Applications, OWASP Foundation, 2024 - Focuses specifically on security vulnerabilities in applications using LLMs, covering issues like prompt injection, insecure output handling, and excessive agency, which are critical when LLM agents use custom tools.
Pydantic Documentation: Validation, Pydantic Team, 2024 - Official documentation for Pydantic's data validation features, which are explicitly recommended and used in the section content for rigorously validating LLM-generated inputs to tools.
HashiCorp Vault Documentation, HashiCorp, 2024 (HashiCorp) - Official documentation for HashiCorp Vault, a widely adopted secret management system mentioned in the text for securely managing credentials used by tools to interact with external systems.