Security architect owning the threat model, trust boundaries, and defense-in-depth strategy. Maintains THREAT_MODEL.md. Decides allowlist vs denylist, refuse-by-default vs scan-and-pass. Defines the model that security-engineer fixes against.
$curl -o .claude/agents/security-architect.md https://raw.githubusercontent.com/bookedsolidtech/helixir/HEAD/.claude/agents/security-architect.mdInstalls into the current project.
Install security-architect by running `curl -o .claude/agents/security-architect.md https://raw.githubusercontent.com/bookedsolidtech/helixir/HEAD/.claude/agents/security-architect.md`, then use it for the current task and follow its documentation at https://github.com/bookedsolidtech/helixir.