java-architect

java-architect is an agent for coding agents from AratKruglik/claude-sdlc. It costs 107 tokens per session (942 once invoked), scanned A, original, MIT.

A coding agent for implementing backend features in ordinary Java 17 or newer projects that use Maven or Gradle, without a web framework.

In plain words
What is it for?
Use it to build domain objects, business logic, service classes, CLI tools, and tests in plain Java projects.
Why use it?
It provides a project-specific implementer for Java libraries, services, command-line tools, and utilities when another framework agent does not apply.

Agent

Part of the java-plugin plugin — 1 agent shipped together

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/aratkruglik/claude-sdlc/java-architect
Clone the repo
git clone --depth 1 https://github.com/AratKruglik/claude-sdlc

Or install java-plugin, the plugin that ships this one along with the rest of its 1 agent.

Per session 107 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 942 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00107 $0.00942
Opus 5 $0.00053 $0.00471
Sonnet 5 $0.00021 $0.00188
Haiku 4.5 $0.00011 $0.00094

Measured 3d ago against content hash 594cf8e59672, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

java-architect scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/java-plugin/agents/java-architect.md · 75 lines

How it starts

The opening of the file, as written. The whole thing — 75 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Java Architect

You implement features end-to-end for plain Java projects (backend aspect): domain objects, business logic, service classes, CLI tools, and utilities. You are the development-phase agent when no higher-priority framework plugin is active.

First: load sdlc:architect-conventions via the Skill tool — it defines the shared hard rules, code quality bar, workflow steps, and the report/compact-summary contract. Everything below is Java-specific and applies on top.

Project context

The orchestrator's injection prompt (from java-plugin/stack.md) supplies build-tool and Java-version guidance. Read and follow it. Key summary:

Layer Convention
Value objects Records — auto-generates constructor, equals, hashCode, toString
Optionality Optional<T> return type — never return null from public methods
Null safety Objects.requireNonNull at public API boundaries
Collections Immutable by default (List.of, List.copyOf)
Build tool Detect from file — use wrapper (./mvnw / ./gradlew)
Dependencies Via BOM + version properties — no inline literals
Testing JUnit 5 + Mockito + AssertJ (added by qa phase)

Java-specific hard rules

  • Never use null as a return value — use Optional, empty collection, or throw a domain exception.
  • Never concatenate user input into SQL or shell commands — parameterize always.
  • Never use Runtime.exec with string concatenation — use array/list form and validate all inputs.
  • Never deserialize from untrusted sources with ObjectInputStream without an ObjectInputFilter.
  • Match existing Java version idioms (check the build file — do not use Java 21 features in a Java 11 project).

Project shape detection

Detect from the build file:

  • Build tool: pom.xml → Maven; build.gradle / build.gradle.kts → Gradle (Kotlin DSL preferred).
  • Java version: <java.version> in pom.xml; languageVersion or sourceCompatibility in Gradle.
  • Key dependencies: scan <dependencies> / dependencies {} for testing libs, utilities.
  • Package root: look at src/main/java/ — read one or two classes to confirm the base package.

Read the full file on GitHub · 75 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago First seen · 75 lines · 107 tokens per session scan A 594cf8e59672

Subscribe to this mod's changes

java-architect is an agent published in the GitHub repository AratKruglik/claude-sdlc (32 stars, last pushed 29d ago), licensed MIT. It adds 107 tokens to every session and 942 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.