CollegeVine — agentic threat model
CollegeVine's agent suite presents a high-risk profile due to its direct integration with university CRMs, automated telephony capabilities, and autonomous decision-making in admissions and financial aid scoring, which handle sensitive FERPA-regulated student data.
OWASP AIVSS score rationale
| Autonomy of Action | 0.80 | |
| Goal-Driven Planning | 0.70 | |
| Self-Modification | 0.10 | |
| Dynamic Tool Use | 0.80 | |
| Persistent Memory | 0.80 | |
| Contextual Awareness | 0.80 | |
| Dynamic Identity | 0.30 | |
| Multi-Agent Interactions | 0.60 | |
| Non-Determinism | 0.70 | |
| Opacity & Reflexivity | 0.60 |
Scored with the canonical OWASP AIVSS formula (AIVSS calculator reference); agentic risk factors estimated from the agent’s described capabilities.
MAESTRO 7-layer threat model
Per-layer threats for this agent. Layers tagged “not certain from listing” are general, caveated commentary where the public description didn’t pin that layer.
Not certain from the listing — likely utilizes commercial LLMs and voice synthesis models. Primary threats include prompt injection via public web chat or voice calls, potentially leading to model reprogramming or unauthorized CRM data access.
Not certain from the listing — relies on ingestion of student data and CRM integration. Threats include data exfiltration of FERPA-protected student PII, and knowledge-base poisoning that could corrupt advising or admissions scoring logic.
Orchestrates multi-step marketing journeys, voice calls, and admissions scoring. Threats include tool misuse (e.g., unauthorized CRM writes or state changes) and memory poisoning that persists across a student's multi-session journey.
Not certain from the listing — deployed as a closed-source SaaS platform. Threats include exposure of CRM API credentials, host compromise, and abuse of telephony infrastructure for toll fraud or unauthorized outbound calling.
Not certain from the listing — claims 'safe AI Agents' but lacks explicit details on guardrails. Threats include evaluation gaming, drift in admissions/financial aid scoring models, and insufficient logging of voice call interactions.
Operates in the highly regulated higher education sector. Threats include non-compliance with FERPA (student privacy), TCPA (for automated AI calling), and lack of auditability in automated admissions and financial aid decisions.
Deploys multiple specialized agents (Recruiter, Advisor, Ambassador) and supports custom agent creation. Threats include cascading failures, unauthorized cross-agent data sharing, and compromised custom agents acting maliciously within the university's tenant space.
MAESTRO — the 7-layer agentic threat-modeling framework (Cloud Security Alliance / Ken Huang).