Security Review

Perform a comprehensive security review of $ARGUMENTS:

Check for OWASP Top 10

1. Injection (SQL, NoSQL, OS Command, LDAP)

   • Look for string concatenation in queries
   • Check for parameterized queries / prepared statements
   • Check for ORM misuse (raw queries)

2. Broken Authentication

   • Check password hashing (bcrypt/scrypt/argon2, not MD5/SHA1)
   • Check session management and token expiry
   • Look for hardcoded credentials