LLM plugins processing untrusted inputs and possessing inadequate entry Command danger serious exploits like remote code execution.