SAP Shopping Assistant — agentic threat model
The SAP Shopping Assistant presents a moderate risk profile; while it integrates with sensitive enterprise product and customer context within the SAP CX ecosystem, its primary role is informational (recommendations and availability) rather than executing autonomous financial transactions.
OWASP AIVSS score rationale
| Autonomy of Action | 0.30 | |
| Goal-Driven Planning | 0.40 | |
| Self-Modification | 0.10 | |
| Dynamic Tool Use | 0.50 | |
| Persistent Memory | 0.30 | |
| Contextual Awareness | 0.60 | |
| Dynamic Identity | 0.10 | |
| Multi-Agent Interactions | 0.10 | |
| Non-Determinism | 0.50 | |
| Opacity & Reflexivity | 0.50 |
Scored with the canonical OWASP AIVSS formula (AIVSS calculator reference); agentic risk factors estimated from the agent’s described capabilities.
MAESTRO 7-layer threat model
Per-layer threats for this agent. Layers tagged “not certain from listing” are general, caveated commentary where the public description didn’t pin that layer.
Not certain from the listing — likely leverages proprietary or fine-tuned commercial LLMs within the SAP CX AI Toolkit. Primary threats include prompt injection to manipulate product recommendations or bypass conversational guardrails.
Not certain from the listing — relies on real-time integration with SAP CX product catalogs, inventory databases, and customer context. Threats include catalog data poisoning and unauthorized extraction of proprietary product or pricing data.
Not certain from the listing — utilizes SAP's proprietary CX AI Toolkit orchestration. Threats involve insecure tool integration with SAP ERP/CX APIs during real-time inventory and compatibility checks.
Not certain from the listing — presumably hosted on SAP's enterprise cloud infrastructure. Threats include API exposure, unauthorized access to the CX toolkit environment, and lack of tenant isolation.
Not certain from the listing — likely utilizes SAP's enterprise monitoring and logging, but specific guardrails or drift detection for this assistant are not detailed. Threats include undetected recommendation drift or manipulation.
Not certain from the listing — presumably inherits SAP's enterprise compliance frameworks (GDPR, SOC2), but specific access controls and audit logs for the shopping assistant are omitted. Threats include compliance violations if customer PII is mishandled.
Not certain from the listing — operates within the SAP CX ecosystem, but multi-agent interactions are not described. Threats include unauthorized API-to-API trust exploitation if integrated with external retail or supply chain agents.
MAESTRO — the 7-layer agentic threat-modeling framework (Cloud Security Alliance / Ken Huang).
These scores are auto-generated from public information (the agent's own listing, docs, and repository) using the canonical OWASP AIVSS formula and the MAESTRO framework — an estimate for guidance, not a penetration test, audit, or certification. See the scoring methodology. Are you the vendor? Factual corrections are free.