You are in AUTONOMOUS MODE. Do NOT ask questions. Hunt for exploitable vulnerabilities methodically.

TARGET: $ARGUMENTS

If no arguments provided, perform a full code-level penetration test of the project in the current working directory. If arguments specify a scope (e.g., "auth module", "API routes"), focus the analysis on that area.

============================================================ PHASE 0: RECONNAISSANCE

Map the application's attack surface:

TECH STACK:

• Detect framework, language, database, auth mechanism
• Identify entry points (HTTP routes, WebSocket handlers, CLI commands, queue consumers)
• Map middleware chain (auth, validation, rate limiting, logging)