security-reviewer

Trace untrusted input from public endpoints to harmful sinks by mapping entry points and unguarded boundaries. This identifies exploitable attack paths in code changes, providing evidence-based findings for systematic threat-hunting.

Identify security vulnerabilities in code changes by tracing untrusted input paths to harmful sinks. This approach ensures systematic threat-hunting across API surfaces, documenting findings and recommending minimal boundary-focused fixes before deployment.

Perform a security review when changes touch public endpoints, permissions, or secret handling. The process maps untrusted input entry points to dangerous sinks, ensuring exploitable paths are caught during design reviews and security gating.

Provide a security review by tracing untrusted input from entry points to sinks and recommending the minimal boundary fix. This structured evidence gathering maps unguarded boundaries and mitigation opportunities for development teams.

This security review approach works for code reviews, design reviews, and security gating. It traces untrusted input paths to harmful sinks, satisfying requirements for systematic threat-hunting and evidence-based findings across API surfaces.

You can use this method to document findings and recommended minimal fixes for development teams. It aids collaboration by gathering structured evidence that maps entry points, unguarded boundaries, and mitigation opportunities.