Figviz — agentic threat model

Not certain from the listing — likely uses a text-to-image model (like Stable Diffusion) or a multimodal LLM to generate SVG/PNG diagrams. Threats include prompt injection leading to inappropriate content generation or model evasion.

Not certain from the listing — likely relies on pre-trained models without extensive RAG or vector databases, though custom STEM datasets might have been used. Threats include training data poisoning if fine-tuned on custom educational datasets.

Not certain from the listing — the tool appears to be a simple single-turn generator rather than a complex agentic framework. Threats of tool misuse or memory poisoning are minimal due to the lack of agentic orchestration.

Not certain from the listing — hosted web application exporting PNGs. Threats include server-side image processing vulnerabilities (e.g., remote code execution via image libraries) and standard web application hosting risks.

Not certain from the listing — no mention of guardrails or output filtering. Threats include generation of offensive, biased, or highly inaccurate scientific diagrams (hallucinations) without automated detection.

Not certain from the listing — mentions a paid model with free credits, implying user accounts and billing. Threats include unauthorized access to user accounts, credit theft, and lack of compliance with educational privacy standards (e.g., COPPA/FERPA).

No multi-agent or marketplace interactions are described; the tool operates as a standalone single-user utility, making ecosystem threats currently inapplicable.