AgentReadyHomeAgent Listing

← BlandAI

BlandAI — agentic threat model

9.4AIVSS 9.4 · Critical

BlandAI presents a high agentic risk profile due to its ability to autonomously conduct real-time voice calls, integrate with external APIs, and perform live call transfers, making it a high-value target for vishing, social engineering, and unauthorized data access.

OWASP AIVSS score rationale

AIVSS = (CVSS_Base + AARS) × Mitigation_Factor, where AARS = (10 − CVSS_Base) × (Factor_Sum / 10) × ThM
CVSS base 8.5AARS uplift 0.9Factor sum 5.7/10Threat ×1.05Mitigation ×1.0
Autonomy of Action
0.80
Goal-Driven Planning
0.60
Self-Modification
0.10
Dynamic Tool Use
0.70
Persistent Memory
0.50
Contextual Awareness
0.80
Dynamic Identity
0.50
Multi-Agent Interactions
0.20
Non-Determinism
0.80
Opacity & Reflexivity
0.70

Scored with the canonical OWASP AIVSS formula (AIVSS calculator reference); agentic risk factors estimated from the agent’s described capabilities.

MAESTRO 7-layer threat model

Per-layer threats for this agent. Layers tagged “not certain from listing” are general, caveated commentary where the public description didn’t pin that layer.

L1 · Foundation Models✓ mapped

Utilizes LLMs and TTS/STT models to generate human-like voice interactions. Vulnerable to audio-based prompt injection (voice hacking) and adversarial inputs designed to bypass safety guardrails during live calls.

L2 · Data Operations✓ mapped

Processes sensitive customer voice data, custom voice clones, and call transcripts. Risks include unauthorized access to call logs, exfiltration of PII spoken during calls, and potential poisoning of custom voice profiles.

L3 · Agent Frameworks✓ mapped

Orchestrates call flows, API integrations, and live call transfers. Vulnerabilities include prompt injection manipulating the agent into executing unauthorized API calls or transferring victims to malicious phone numbers.

L4 · Deployment & Infrastructure⚠ not certain from listing

Not certain from the listing — likely relies on cloud hosting and telephony gateways. Risks include insecure API endpoints, lack of sandboxing for custom integrations, and potential compromise of telephony infrastructure leading to caller ID spoofing.

L5 · Evaluation & Observability✓ mapped

Provides real-time call analytics. Gaps may exist in detecting adversarial manipulation or social engineering attempts in real-time, allowing malicious actors to exploit the agent during live conversations without immediate detection.

L6 · Security & Compliance (cross-cutting)⚠ not certain from listing

Not certain from the listing — compliance with telecom regulations (like TCPA, STIR/SHAKEN) and data privacy laws (GDPR/CCPA) for recorded voice data is critical but not detailed in the public directory listing.

L7 · Agent Ecosystem⚠ not certain from listing

Not certain from the listing — while it supports API integrations, there is no explicit mention of a multi-agent marketplace or direct agent-to-agent collaboration protocols that could lead to cascading trust failures.

MAESTRO — the 7-layer agentic threat-modeling framework (Cloud Security Alliance / Ken Huang).