PR Security Review

Automated security analysis of pull request diffs. Focuses on security-specific concerns that generic code review misses: injection vulnerabilities, authentication bypasses, hardcoded secrets, and insecure data handling introduced by the change.

When to Use

• Before merging any PR that touches authentication, authorization, or session handling
• Before merging PRs that add or modify API endpoints
• When a PR processes user input, file uploads, or external data
• Before merging PRs that update security-sensitive dependencies
• As a final gate before releasing to production

When NOT to Use