Fig0 — agentic threat model

Not certain from the listing — likely utilizes multimodal or text-to-image foundation models to generate and edit scientific diagrams. Risks include prompt injection leading to misleading or fraudulent scientific visualizations, and potential model-reprogramming attacks.

Not certain from the listing — ingests user-provided scientific data and descriptions to generate charts. This introduces significant risks of data exfiltration or intellectual property theft of unpublished research, as well as data poisoning if user inputs are used for downstream model fine-tuning.

Not certain from the listing — likely relies on deterministic parsing and rendering pipelines rather than complex agentic orchestration. Vulnerabilities may exist in the libraries used to parse scientific data formats (e.g., CSV, XML) or render vector graphics.

Not certain from the listing — hosted as a closed-source SaaS platform. Standard web infrastructure risks apply, including potential server-side request forgery (SSRF) if the tool fetches external data sources, and sandbox escape risks during server-side figure rendering.

Not certain from the listing — no details are provided regarding output verification or guardrails to prevent the generation of deceptive, plagiarized, or scientifically inaccurate visual representations.

Not certain from the listing — as a closed-source freemium tool, there is no explicit mention of enterprise-grade access controls, SOC2 compliance, or data privacy guarantees, which are critical for protecting proprietary academic and corporate research.

Not certain from the listing — operates primarily as a standalone vertical application with collaborative human editing, showing no evidence of integration with external autonomous agent marketplaces or ecosystems.