Schengen Calculator — agentic threat model
The Schengen Calculator is a low-risk, single-purpose utility with minimal agentic capabilities, posing very low systemic risk. Primary concerns are limited to input parsing correctness and basic web application security rather than autonomous agent threats.
OWASP AIVSS score rationale
| Autonomy of Action | 0.10 | |
| Goal-Driven Planning | 0.00 | |
| Self-Modification | 0.00 | |
| Dynamic Tool Use | 0.10 | |
| Persistent Memory | 0.00 | |
| Contextual Awareness | 0.10 | |
| Dynamic Identity | 0.00 | |
| Multi-Agent Interactions | 0.00 | |
| Non-Determinism | 0.20 | |
| Opacity & Reflexivity | 0.10 |
Scored with the canonical OWASP AIVSS formula (AIVSS calculator reference); agentic risk factors estimated from the agent’s described capabilities.
MAESTRO 7-layer threat model
Per-layer threats for this agent. Layers tagged “not certain from listing” are general, caveated commentary where the public description didn’t pin that layer.
Not certain from the listing — likely uses a basic LLM for parsing user-provided travel dates, which could be vulnerable to prompt injection leading to incorrect calculation outputs.
Not certain from the listing — likely does not utilize a vector database or complex RAG, processing only transient user-provided date inputs.
Not certain from the listing — orchestration is likely minimal, translating natural language dates into a structured format for a deterministic calculation script.
Not certain from the listing — hosted as a free web tool; standard web application vulnerabilities and lack of sandboxing details apply.
Not certain from the listing — no mention of guardrails, evaluation metrics, or real-time monitoring to detect calculation drift or adversarial inputs.
Not certain from the listing — no authentication, privacy policies, or compliance certifications (such as GDPR for travel history) are specified.
Not certain from the listing — operates as a standalone horizontal utility with no indicated multi-agent or marketplace integrations.
MAESTRO — the 7-layer agentic threat-modeling framework (Cloud Security Alliance / Ken Huang).