security-best-practices

Reviews Python, JavaScript/TypeScript, and Go codebases for security vulnerabilities using language- and framework-specific guidance. Operates in three modes: writing secure-by-default code, passively flagging critical issues during development, or generating a prioritized vulnerability report on request. Instead of manually cross-referencing OWASP docs and framework-specific advisories, it loads the right reference material for your exact stack and applies it directly to your code.