mcpField
M
multi-agentic-threat-model

multi-agentic-threat-model

github.com/owaspSecurity208165 installsUpdated 2w ago
Repository

About multi-agentic-threat-model

A threat-modeling skill for multi-agent systems using the CSA MAESTRO seven-layer architecture and OWASP guidance. It examines layer-specific and cross-layer threats, agent patterns, and mitigations, then produces prioritized risk analysis.

Key features

  1. 01Map systems to seven MAESTRO layers
  2. 02Analyze layer-specific and cross-layer threats
  3. 03Assess extended multi-agent attack scenarios
  4. 04Evaluate common agent architecture patterns
  5. 05Develop layered mitigations and risk priorities

Use cases

  1. 01Map a multi-agent system architecture
  2. 02Trace attacks across system layers
  3. 03Assess risks in agent handoff patterns
  4. 04Prioritize security mitigations

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/owasp/secure-agent-playbook --skill multi-agentic-threat-model

After installing, type/multi-agentic-threat-modelin Claude Code to confirm it loaded.

Details

From the project README

Multi-Agentic System Threat Modeling

Conduct comprehensive threat modeling for multi-agent systems using the Cloud Security Alliance (CSA) MAESTRO framework's 7-layer architecture and OWASP Multi-Agentic System Threat Modeling Guide v1.0.

Steps

  1. MAESTRO 7-Layer Architecture Mapping — Decompose the system into CSA's layered reference architecture:

    • Layer 7: Agent Ecosystem — User-facing applications, agent marketplace, business integrations
    • Layer 6: Security & Compliance — Cross-cutting security controls, compliance frameworks
    • Layer 5: Evaluation & Observability — Monitoring, metrics, anomaly detection, performance tracking
    • Layer 4: Deployment & Infrastructure — Containers, orchestration, cloud/on-premise resources
    • Layer 3: Agent Frameworks — Orchestration logic, agent-tool bindings, routing decisions
    • Layer 2: Data Operations — Memory stores, vector databases, RAG pipelines, context management
    • Layer 1: Foundation Models — Core LLMs, model APIs, inference engines

  2. Layer-Specific Threat Analysis — Identify threats unique to each MAESTRO layer using CSA taxonomy.

  3. Cross-Layer Threat Assessment — Analyze attack chains that span multiple layers (supply chain attacks, lateral movement, privilege escalation, data leakage cascades).

  4. Extended Multi-Agent Threats — Apply MAESTRO framework extensions for complex multi-agent scenarios:

    • Reasoning Collapse — Chain-of-thought breakdowns across agent delegation
    • Emergent Covert Coordination — Autonomous symbolic protocol development
    • Heterogeneous Multi-Agent Exploits — Coordinated attacks using diverse agent capabilities
    • Goal Drift in Delegated Chains — Intent mutation through agent handoffs
    • Trust Misuse Between Legitimate Agents — Strategic misreporting within valid roles

  5. Architecture Pattern Risk Assessment — Evaluate specific multi-agent patterns (supervisor-agent, hierarchical, distributed ecosystem, human-in-the-loop).

  6. Mitigation Strategy Development — Design layer-specific, cross-layer, and AI-specific security controls.

Output

Use the finding format from templates/finding.md. Produce:

  • MAESTRO 7-Layer Architecture Map — System decomposition across all layers
  • Layer-Specific Threat Assessment — Detailed analysis for each MAESTRO layer
  • Cross-Layer Attack Chain Analysis — Multi-layer threat scenarios
  • Extended Multi-Agent Threat Analysis — MAESTRO framework extensions
  • Architecture Pattern Risk Assessment — Pattern-specific vulnerabilities
  • Risk Prioritization Matrix — Likelihood vs. impact analysis
  • Layered Mitigation Strategy — Defense-in-depth recommendations

OWASP References

  • CSA MAESTRO Framework — 7-Layer Agentic AI Reference Architecture
  • OWASP Multi-Agentic System Threat Modeling Guide v1.0
  • OWASP Top 10 for Agentic Applications 2026
  • OWASP GenAI Security Project

Comments

Markdown supported