Eclat Institute — agentic threat model

Not certain from the listing — likely relies on standard commercial or open-source LLMs tuned for mathematics and science tutoring. Primary threats include prompt injection leading to inappropriate content generation for students or model hallucination of incorrect academic facts.

Not certain from the listing — likely utilizes a vector database or structured knowledge base containing math/science curricula and practice questions. Threats include data poisoning of the curriculum or unauthorized exfiltration of student performance data.

Not certain from the listing — as an open-source framework, it may orchestrate tutoring workflows. Threats include insecure tool integration if it executes code (e.g., Python interpreter for solving math equations) without proper sandboxing.

Not certain from the listing — likely hosted on standard cloud infrastructure or run locally by users. Threats include typical web application vulnerabilities, insecure API endpoints, and lack of isolation if running user-generated code.

Not certain from the listing — requires robust monitoring to ensure educational content remains accurate and age-appropriate. Gaps here could lead to undetected drift or toxic outputs reaching student users.

Not certain from the listing — must comply with student data privacy regulations (e.g., COPPA, GDPR) if handling minors' data. Lack of explicit access controls or audit logs poses compliance risks.

Not certain from the listing — likely operates as a standalone educational agent with minimal multi-agent or marketplace interactions, presenting low ecosystem-level risk.