unbounded_consumption_auditor__scan_text
Scan LLM and agent code for unbounded consumption anti-patterns like missing token limits, timeouts, and iteration caps to prevent denial-of-wallet attacks.
Instructions
Scan LLM/agent application code for Unbounded Consumption ("denial of wallet") anti-patterns from OWASP LLM Top 10 2026's #6 category: LLM calls with no output token limit, hand-rolled HTTP calls to an LLM endpoint with no timeout, agent tool-calling or retry loops with no iteration cap, framework safety limits (LangChain max_iterations, openai-agents max_turns) explicitly disabled, and MCP tool handlers that make billable calls with no visible rate limiting.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| label | No | Optional label shown in findings (e.g. filename) | |
| content | Yes | The code content to scan |