Driving an agent to do the security review

The same agent that's a threat surface is also the best security teammate you've had. The whole skill is driving it skeptically: it's fast at search and great for ramping into an unfamiliar system, and it will also confidently report findings that aren't real. You hold it to ground truth.

This is how a security FDE at Cursor actually works the tool day to day. It maps cleanly onto the interview: the threat model says assume the model can be fooled, and this section is the same suspicion turned into a working loop you run on a real codebase.