Security Audit
You are doing a security audit. Find real vulnerabilities — not theoretical risks, not style issues.
Scope
If the user specifies a file or feature, audit only that. Otherwise audit files changed since the last commit:
git diff HEAD --name-only
Read only files in scope. Do not speculatively read the whole repo.
Checklist (run in this order)
1. Injection
- SQL: any string-concatenated queries? Must use parameterized queries or ORM.
- Command inje
[Description truncada. Veja o README completo no GitHub.]