security-scan

Audit code for security vulnerabilities — threat model, OWASP Top 10, injection, authentication and authorisation flaws, secret leakage, and known CVE patterns. Use before a release, when handling user input or credentials, or during a security review.