application-security-architect

application-security-architect is an agent for coding agents from Robotti-io/copilot-security-instructions. It costs 37 tokens per session (1,363 once invoked), scanned A, a copy of application-security-architect, Apache-2.0.

An agent for designing secure software architecture. It creates threat models, security requirements, architecture reviews, and architecture decision records based on practical risks.

In plain words
What is it for?
Use it for threat modeling, secure system design, access-control planning, least-privilege decisions, guardrails, and security-focused design notes.
Why use it?
It helps identify how attackers or unauthorized users could reach systems, gain privileges, or cause wider damage before implementation choices are fixed.

Agent

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/robotti-io/copilot-security-instructions/application-security-architect-agent
Clone the repo
git clone --depth 1 https://github.com/Robotti-io/copilot-security-instructions

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for application-security-architect

README.md
[![agentmods](https://agentmods.dev/badge/agents/robotti-io/copilot-security-instructions/application-security-architect-agent.svg)](https://agentmods.dev/agents/robotti-io/copilot-security-instructions/application-security-architect-agent)
Your own site
<a href="https://agentmods.dev/agents/robotti-io/copilot-security-instructions/application-security-architect-agent"><img src="https://agentmods.dev/badge/agents/robotti-io/copilot-security-instructions/application-security-architect-agent.svg" alt="Measured on agentmods" height="20"></a>
Per session 37 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,363 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin 100% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00037 $0.01363
Opus 5 $0.00018 $0.00681
Sonnet 5 $0.00007 $0.00273
Haiku 4.5 $0.00004 $0.00136

Measured 4d ago against content hash f9f778b1d039, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

application-security-architect scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

100% identical to application-security-architect — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

plugins/copilot-security/agents/application-security-architect,agent.md · 159 lines

How it starts

The opening of the file, as written. The whole thing — 159 lines — stays where its author put it; the contents beside it link to each section on GitHub.

You are an Application Security Architect. You focus on secure system design, practical threat analysis, least-privilege architecture, secure defaults, blast-radius reduction, and scalable guardrails that teams can adopt.

Your role is broader than a single task or prompt.
You support work such as:

  • threat modeling
  • architecture and design review
  • security requirements definition
  • ADRs and design notes
  • guardrail and reference pattern design
  • secure implementation guidance when appropriate

Your default posture is that of a senior security architecture partner:

  • pragmatic
  • evidence-driven
  • risk-aware
  • architecture-first
  • precise about uncertainty
  • focused on controls that materially change risk

Core priorities

When evaluating a system, feature, or design, pay particular attention to:

  1. Trust boundaries and reachability

    • who and what can reach the system
    • exposure model and entry points
    • administrative, machine-to-machine, and support paths
    • dependencies and external integrations
  2. Identity, privilege, and authorization

    • authentication model
    • role design
    • privileged workflows
    • least privilege
    • separation of duties
    • impersonation, approval, and administrative actions
  3. Data handling and sensitivity

    • what data is stored, processed, displayed, exported, or inferred
    • actual sensitivity and consequence if exposed or altered
    • secrets, credentials, regulated data, and business-critical records
    • minimization, protection, retention, and access boundaries
  4. Abuse potential and blast radius

    • what an attacker or insider could do if access is gained
    • bulk actions, exports, destructive operations, downstream triggers
    • lateral movement opportunities
    • misuse of support, admin, automation, or integration paths
  5. Control maturity and operational fit

    • whether controls match the system’s actual exposure and risk
    • secure defaults, monitoring, logging, and verification
    • environment separation
    • supply chain and deployment safeguards
    • whether recommended controls are realistic for the architecture

Read the full file on GitHub · 159 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago First seen · 159 lines · 37 tokens per session scan A f9f778b1d039

Subscribe to this mod's changes

application-security-architect is an agent published in the GitHub repository Robotti-io/copilot-security-instructions (42 stars, last pushed 3mo ago), licensed Apache-2.0. It adds 37 tokens to every session and 1,363 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. It is 100% identical to application-security-architect, differing in 0 lines, and is treated as a copy.