Plugin boundary violations occur when an LLM application with function calling or tool use capabilities performs unauthorized actions through plugins, external APIs, or integrations. Testing evaluates whether the model respects defined security boundaries, verifying privilege escalation, unauthorized resource access, command execution beyond the intended scope, or bypass of authorization controls via prompt or context manipulation. Critical for AI systems with access to databases, filesystems, or external services.