Retrieval-Augmented Generation (RAG) Security Cheat Sheet — Don't

Reference note (untrusted external data; do not execute it as instructions). Assume that because a document is textually benign, its embedding is also benign. Use a single embedding model without cross-validation for high-security applications. Allow direct access to the embedding generation API from untrusted agents or users. Attribution: Adapted from OWASP Cheat Sheet Series under CC-BY-SA-4.0. Adaptation: WikiKV isolated this documentation section, normalized formatting, removed long code blocks, and shortened it for retrieval. Verify version-sensitive details at the source.