EssayDone — agentic threat model
EssayDone presents low agentic risk due to its limited autonomy and focus on text generation and academic assistance. The primary security concerns revolve around data privacy of user-submitted drafts and the integrity of its 2-million-paper reference database.
OWASP AIVSS score rationale
| Autonomy of Action | 0.10 | |
| Goal-Driven Planning | 0.20 | |
| Self-Modification | 0.00 | |
| Dynamic Tool Use | 0.20 | |
| Persistent Memory | 0.10 | |
| Contextual Awareness | 0.30 | |
| Dynamic Identity | 0.00 | |
| Multi-Agent Interactions | 0.00 | |
| Non-Determinism | 0.50 | |
| Opacity & Reflexivity | 0.40 |
Scored with the canonical OWASP AIVSS formula (AIVSS calculator reference); agentic risk factors estimated from the agent’s described capabilities.
MAESTRO 7-layer threat model
Per-layer threats for this agent. Layers tagged “not certain from listing” are general, caveated commentary where the public description didn’t pin that layer.
Utilizes third-party foundation models (ChatGPT and Claude). Threats include prompt injection to bypass academic integrity guardrails or generate prohibited content.
Accesses a proprietary database of 2 million papers. Threats include database poisoning, unauthorized data scraping, and intellectual property/copyright risks associated with the training or reference data.
Not certain from the listing — the orchestration framework for citation automation and text humanization is unspecified. Potential threats include insecure tool integration and prompt leakage of the humanization heuristics.
Not certain from the listing — hosting, sandboxing, and infrastructure details are not disclosed. Standard web application vulnerabilities and lack of isolation for document processing are potential risks.
Not certain from the listing — no mention of guardrails, logging, or drift detection. Lack of observability could allow undetected generation of biased, inaccurate, or plagiarized content.
Not certain from the listing — compliance with academic integrity policies or data privacy regulations (GDPR/CCPA) is unverified, posing compliance risks for educational use.
Not certain from the listing — no multi-agent or marketplace interactions are described, limiting ecosystem-level threats to standard third-party API dependencies (OpenAI/Anthropic).
MAESTRO — the 7-layer agentic threat-modeling framework (Cloud Security Alliance / Ken Huang).