Security Code Audit (FIND phase)

Overview

Read source code and find vulnerabilities by pattern. No running app required — works in any AI coding tool. Trace untrusted input from its source (where it enters) to its sink (where it's used dangerously).

Core principle: A vulnerability is untrusted data reaching a dangerous sink without adequate validation/encoding in between. Find the source→sink paths.

Method: source → sink tracing

1. From the threat model (or by scanning entry points), pick a source of untrusted input.
2. Follow the data through the code to where it's used (the sink).
3. Ask: is it validated, sanitized, parameterized, or encoded for that sink? If not → finding.
4. Record severity, file:line, the exact data path, and how to exploit it.