---
id: 1479
title: "Auditing the Ask Astro LLM Q&A app"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2024/07/05/auditing-the-ask-astro-llm-qa-app/"
published_at: "2024-07-05 13:00"
tags: ["ai-security", "prompt-injection", "llm", "audit", "rag", "data-poisoning", "trail-of-bits", "graphql-injection"]
phying_url: "https://phying.com/item/1479"
lang: en
---

# Auditing the Ask Astro LLM Q&A app

## Summary

Trail of Bits audited Ask Astro, an open-source RAG chatbot, finding four issues: data poisoning via source deletion, split-view poisoning through GitHub Issues, GraphQL injection, and prompt injection.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2024-07-05 13:00
- **Original:** https://blog.trailofbits.com/2024/07/05/auditing-the-ask-astro-llm-qa-app/
- **Phying News:** https://phying.com/item/1479