Security Review

Scan the target codebase for OWASP Top-10 vulnerabilities, hardcoded secrets, insecure dependency versions, and unsafe code patterns. Output a read-only markdown report. Never write to or modify files in the target project.

Task Tracking

Before doing any work, call TaskCreate for each phase below. Call TaskUpdate (status in_progress) when you begin a phase and TaskUpdate (status completed) when you finish it.