Lendtrain — agentic threat model
Lendtrain is a low-risk, informational AI agent focused on mortgage refinance analysis. Its primary security risks lie in the handling of sensitive user financial inputs and the potential for prompt injection to manipulate financial advice or rate calculations.
OWASP AIVSS score rationale
| Autonomy of Action | 0.20 | |
| Goal-Driven Planning | 0.20 | |
| Self-Modification | 0.00 | |
| Dynamic Tool Use | 0.20 | |
| Persistent Memory | 0.10 | |
| Contextual Awareness | 0.30 | |
| Dynamic Identity | 0.00 | |
| Multi-Agent Interactions | 0.00 | |
| Non-Determinism | 0.40 | |
| Opacity & Reflexivity | 0.30 |
Scored with the canonical OWASP AIVSS formula (AIVSS calculator reference); agentic risk factors estimated from the agent’s described capabilities.
MAESTRO 7-layer threat model
Per-layer threats for this agent. Layers tagged “not certain from listing” are general, caveated commentary where the public description didn’t pin that layer.
Uses Claude AI for savings analysis. Primary threats include prompt injection that could manipulate the savings recommendations or cause the model to hallucinate unrealistic financial terms.
Not certain from the listing — The agent processes user-submitted mortgage details and references pricing data. Risks include the potential leakage of user financial profiles and unauthorized access to proprietary pricing datasets if stored insecurely.
Not certain from the listing — Orchestrates Claude AI alongside a mortgage pricing engine. Vulnerabilities could arise from insecure data flow between the LLM and the deterministic pricing engine, potentially leading to parameter tampering.
Not certain from the listing — As an open-source project, deployment security depends heavily on the hosting environment. Risks include exposed API keys for Claude AI and lack of network isolation for the pricing engine.
Not certain from the listing — No built-in guardrails or logging mechanisms are detailed. Without observability, malicious inputs designed to skew rate calculations or exploit the LLM may go undetected.
Not certain from the listing — Handles sensitive financial information but does not specify compliance with financial regulations (e.g., GLBA) or data protection standards. Access controls and audit logs are undefined.
Lendtrain operates as a standalone tool without multi-agent coordination or marketplace integrations, minimizing ecosystem-level threats.
MAESTRO — the 7-layer agentic threat-modeling framework (Cloud Security Alliance / Ken Huang).
These scores are auto-generated from public information (the agent's own listing, docs, and repository) using the canonical OWASP AIVSS formula and the MAESTRO framework — an estimate for guidance, not a penetration test, audit, or certification. See the scoring methodology. Are you the vendor? Factual corrections are free.