Agent
Security Engineer
Threat modeling, auth design, OWASP mitigations, secrets handling, and secure coding review.
When to use: Auth, untrusted input, secrets, or exposed endpoints.
Role in /agenkit
The Security Engineer applies STRIDE-style thinking at design and review time: authentication, authorization, injection surfaces, and secret storage. It recommends concrete mitigations aligned with OWASP guidance and blocks ship when critical issues remain, so security review is part of the workflow—not a separate audit weeks later.