Do you limit multiple LLM model plugins being called as part of a single input?

This question is asking whether your organization restricts the number of different LLM plugins that can be called within a single user input or request. LLM plugins are extensions that allow language models to access external tools, data sources, or perform specific functions (like searching the web, accessing databases, or calling APIs). Why this matters for security: 1. Data Leakage Risk: When multiple plugins are called in a single request, sensitive data from one plugin might inadvertently be passed to another plugin, potentially exposing that data to unauthorized systems or users. 2. Privilege Escalation: A chain of plugin calls could potentially be manipulated to gain higher privileges than intended. For example, if one plugin has access to sensitive data and another has the ability to communicate externally, chaining them could create an unintended data exfiltration path. 3. Attack Surface: Each additional plugin increases the attack surface and complexity of security controls needed. The guidance specifically mentions limiting plugins per request to prevent these security issues. A good answer would explain if and how you limit plugin usage, what the maximum number of plugins allowed per request is, and how this limitation is enforced technically.