MatchMyType — agentic threat model
MatchMyType is a low-risk, informational AI agent focused on MBTI personality analysis. Its primary security risks are related to user data privacy (PII) and potential prompt injection leading to inappropriate or biased relationship advice.
OWASP AIVSS score rationale
| Autonomy of Action | 0.10 | |
| Goal-Driven Planning | 0.10 | |
| Self-Modification | 0.00 | |
| Dynamic Tool Use | 0.00 | |
| Persistent Memory | 0.20 | |
| Contextual Awareness | 0.40 | |
| Dynamic Identity | 0.00 | |
| Multi-Agent Interactions | 0.00 | |
| Non-Determinism | 0.50 | |
| Opacity & Reflexivity | 0.40 |
Scored with the canonical OWASP AIVSS formula (AIVSS calculator reference); agentic risk factors estimated from the agent’s described capabilities.
MAESTRO 7-layer threat model
Per-layer threats for this agent. Layers tagged “not certain from listing” are general, caveated commentary where the public description didn’t pin that layer.
Not certain from the listing — likely relies on a commercial foundation LLM to analyze MBTI types. Vulnerable to prompt injection to bypass safety filters or generate biased relationship advice.
Not certain from the listing — likely stores user-submitted MBTI profiles and relationship contexts. Vulnerable to data exfiltration of sensitive personal relationship details if the database or vector store is insecure.
Not certain from the listing — likely uses a simple orchestration framework to format prompts. Low risk of tool misuse as no active tools or external APIs are described.
Not certain from the listing — hosted as a closed-source web application. Standard web vulnerabilities (OWASP Top 10) apply to the hosting infrastructure.
Not certain from the listing — no mention of continuous evaluation or guardrails to prevent hallucinated or toxic relationship advice.
Not certain from the listing — lacks explicit mention of privacy compliance (e.g., GDPR) for handling sensitive personal relationship data.
No multi-agent or ecosystem interactions are described; the agent operates as a standalone vertical application.
MAESTRO — the 7-layer agentic threat-modeling framework (Cloud Security Alliance / Ken Huang).
These scores are auto-generated from public information (the agent's own listing, docs, and repository) using the canonical OWASP AIVSS formula and the MAESTRO framework — an estimate for guidance, not a penetration test, audit, or certification. See the scoring methodology. Are you the vendor? Factual corrections are free.