ClikDeo — agentic threat model
ClikDeo is a client-side video editing utility with virtually no agentic capabilities or AI-specific risks. Its security posture is defined by standard web application security (e.g., XSS, dependency supply chain) rather than LLM-specific threats.
OWASP AIVSS score rationale
| Autonomy of Action | 0.00 | |
| Goal-Driven Planning | 0.00 | |
| Self-Modification | 0.00 | |
| Dynamic Tool Use | 0.00 | |
| Persistent Memory | 0.00 | |
| Contextual Awareness | 0.00 | |
| Dynamic Identity | 0.00 | |
| Multi-Agent Interactions | 0.00 | |
| Non-Determinism | 0.10 | |
| Opacity & Reflexivity | 0.10 |
Scored with the canonical OWASP AIVSS formula (AIVSS calculator reference); agentic risk factors estimated from the agent’s described capabilities.
MAESTRO 7-layer threat model
Per-layer threats for this agent. Layers tagged “not certain from listing” are general, caveated commentary where the public description didn’t pin that layer.
Not certain from the listing — ClikDeo is described as a standard video editor; there is no mention of an underlying foundation model, LLM, or generative AI capabilities.
Not certain from the listing — Video processing occurs locally on the user's device. There is no mention of RAG, vector databases, or training data operations.
Not certain from the listing — The tool lacks an agent framework, orchestration, or planning capabilities, operating as a direct user-controlled utility.
Web-based application running locally in the user's browser. Infrastructure threats are limited to client-side vulnerabilities (e.g., XSS, malicious JS dependencies) rather than server-side container compromise.
Not certain from the listing — No mention of LLM evaluation, guardrails, or observability logging, which is expected for a local client-side utility.
The tool emphasizes privacy by processing videos locally without uploading to external servers, but lacks explicit details on compliance certifications, access controls, or formal audits.
Not certain from the listing — There is no multi-agent interaction, marketplace integration, or agent-to-agent communication described.
MAESTRO — the 7-layer agentic threat-modeling framework (Cloud Security Alliance / Ken Huang).