secure-storage
Installation
SKILL.md
Secure Storage for RAG Systems
Security Requirement
Data used by RAG systems (or other plugin systems) MUST be protected against unauthorized access and modification. If RAG data is modified maliciously, the LLM system will provide that malicious information to users as if it were legitimate.
Risks of Unprotected RAG Data
| Risk | Impact |
|---|---|
| Data poisoning | Attacker modifies RAG data to inject false or harmful information |
| Unauthorized access | Sensitive knowledge base data exposed to unauthorized users |
| Integrity compromise | Tampered RAG data causes the LLM to produce incorrect outputs |
| Trust exploitation | Users trust RAG-augmented responses, amplifying the impact of poisoned data |