security-review

Security code review of a change, endpoint, or feature: how it gets attacked, abused, or leaked, ranked by real-world impact rather than checklist severity. Use when code touches authentication, authorization, untrusted input, SQL or shell execution, secrets, payments, file uploads, or personal data, or before a risky endpoint ships.