7.4The Key Takeaway

AI features do not create a separate security domain -- they extend the existing one. Every traditional vulnerability must be re-evaluated in the context of AI capabilities:

1. Input validation must include AI output, not just user input
2. Access controls must be enforced at the tool/plugin level, not just the API level
3. Secret management must account for LLM provider API keys
4. Logging must balance auditability with PII protection
5. Network security must prevent SSRF through AI-mediated URL access

Test both the traditional web application surface and the AI-specific surface. They are not separate -- they interact and amplify each other.