AgentReadyHomeAgent Listing

← CVnomist Resume tailoring AI

CVnomist Resume tailoring AI — agentic threat model

5.8AIVSS 5.8 · Medium

CVnomist is a low-autonomy, single-purpose utility with minimal agentic risk, primarily presenting data privacy and prompt injection risks due to its handling of sensitive personal resume data.

OWASP AIVSS score rationale

AIVSS = (CVSS_Base + AARS) × Mitigation_Factor, where AARS = (10 − CVSS_Base) × (Factor_Sum / 10) × ThM
CVSS base 5.3AARS uplift 0.54Factor sum 1.2/10Threat ×0.95Mitigation ×1.0
Autonomy of Action
0.10
Goal-Driven Planning
0.10
Self-Modification
0.00
Dynamic Tool Use
0.00
Persistent Memory
0.10
Contextual Awareness
0.30
Dynamic Identity
0.00
Multi-Agent Interactions
0.00
Non-Determinism
0.40
Opacity & Reflexivity
0.20

Scored with the canonical OWASP AIVSS formula (AIVSS calculator reference); agentic risk factors estimated from the agent’s described capabilities.

MAESTRO 7-layer threat model

Per-layer threats for this agent. Layers tagged “not certain from listing” are general, caveated commentary where the public description didn’t pin that layer.

L1 · Foundation Models⚠ not certain from listing

Not certain from the listing — likely relies on third-party commercial LLMs. The primary threat is prompt injection via adversarial job descriptions designed to hijack the resume generation process or exfiltrate data.

L2 · Data Operations⚠ not certain from listing

Not certain from the listing — processes highly sensitive PII (resumes). Key threats include data exfiltration, unauthorized retention of user resumes, and potential leakage if user data is used for model training.

L3 · Agent Frameworks⚠ not certain from listing

Not certain from the listing — likely uses a basic API wrapper rather than a complex agentic framework. Risk is low, limited to insecure handling of user-provided text inputs.

L4 · Deployment & Infrastructure⚠ not certain from listing

Not certain from the listing — hosted as a closed-source web application. Standard web application vulnerabilities (OWASP Top 10) and insecure cloud hosting configurations are the primary infrastructure threats.

L5 · Evaluation & Observability⚠ not certain from listing

Not certain from the listing — no mention of guardrails or output verification. This presents a risk of 'hallucinated' skills or credentials being added to resumes without user detection.

L6 · Security & Compliance (cross-cutting)⚠ not certain from listing

Not certain from the listing — handling job applicant data requires strict compliance with GDPR, CCPA, and data privacy regulations, but no compliance certifications or access controls are specified.

L7 · Agent Ecosystem⚠ not certain from listing

Not certain from the listing — operates as an isolated, standalone tool with no indicated multi-agent or marketplace integrations, making ecosystem risks negligible.

MAESTRO — the 7-layer agentic threat-modeling framework (Cloud Security Alliance / Ken Huang).