Edubrain — agentic threat model
EduBrain presents a low-to-moderate agentic risk profile, primarily acting as a passive, user-triggered academic assistant with low autonomy. The primary security concerns revolve around data privacy (student PII and academic submissions) and the potential for prompt injection to bypass academic integrity guardrails.
OWASP AIVSS score rationale
| Autonomy of Action | 0.20 | |
| Goal-Driven Planning | 0.20 | |
| Self-Modification | 0.00 | |
| Dynamic Tool Use | 0.10 | |
| Persistent Memory | 0.30 | |
| Contextual Awareness | 0.40 | |
| Dynamic Identity | 0.00 | |
| Multi-Agent Interactions | 0.00 | |
| Non-Determinism | 0.50 | |
| Opacity & Reflexivity | 0.40 |
Scored with the canonical OWASP AIVSS formula (AIVSS calculator reference); agentic risk factors estimated from the agent’s described capabilities.
MAESTRO 7-layer threat model
Per-layer threats for this agent. Layers tagged “not certain from listing” are general, caveated commentary where the public description didn’t pin that layer.
Not certain from the listing — The underlying foundation models used for essay generation and homework solving are undisclosed. Potential threats include prompt injection to bypass academic integrity filters, or model hallucination leading to incorrect educational explanations.
Not certain from the listing — No details are provided regarding data storage, RAG, or vector databases. Risks include the exposure of student-submitted essays (intellectual property) and potential leakage of student PII.
Not certain from the listing — The orchestration framework is undisclosed. Risks include insecure handling of user prompts during essay generation or tool misuse if it integrates with external calculators or search APIs.
Not certain from the listing — Hosting and infrastructure details are omitted. Standard web application vulnerabilities apply, including unauthorized access to user accounts or lack of sandboxing if the tool executes student-submitted code.
Not certain from the listing — No mention of guardrails, evaluation metrics, or monitoring. Lack of observability could allow students to abuse the system for mass plagiarism or bypass safety filters undetected.
Not certain from the listing — Compliance with student privacy regulations (such as COPPA or FERPA) is not stated. The lack of explicit identity and access management controls poses a risk to student data privacy.
Not certain from the listing — No multi-agent or marketplace integrations are described. The agent operates as a standalone vertical solution, minimizing ecosystem-level cascading risks.
MAESTRO — the 7-layer agentic threat-modeling framework (Cloud Security Alliance / Ken Huang).