Skippership — agentic threat model

Not certain from the listing — The specific foundation models used for behavior analysis and recommendation generation are not disclosed. Risks include potential data leakage if the model is fine-tuned on session data, or prompt injection if malicious user inputs in recorded sessions are processed by the LLM.

High risk. The agent ingests massive amounts of telemetry, including full session recordings, heatmaps, and console errors. This creates a significant risk of data exfiltration or exposure of sensitive PII, session tokens, or credentials captured from user screens and console logs.

The orchestration framework processes session events and console errors to generate recommendations. A key threat is indirect prompt injection, where a user session contains malicious payloads (e.g., in a form field or console error) designed to manipulate the AI's analysis or recommendations.

Not certain from the listing — As a closed-source SaaS tool, the hosting infrastructure, database sandboxing, and secrets management are undisclosed. Compromise of the hosting environment would grant attackers access to unlimited session recordings across all integrated sites.

Not certain from the listing — It is unclear what guardrails or evaluation mechanisms are in place to prevent the AI from generating misleading recommendations or to monitor the system for drift and anomalous data ingestion patterns.

The listing claims the tool is 'secure' and 'private' with customizable data retention periods. However, compliance with regulations like GDPR/CCPA is highly dependent on robust, automated PII masking within the session recordings, which is not explicitly detailed.

The agent operates as a standalone horizontal analytics tool. There is no indication of multi-agent orchestration or marketplace integrations, making ecosystem-level cascading failures a low threat.