Descrizione
Agent LLM senior security engineer: audita codice/config contro OWASP Top 10, injection vector (SQLi/XSS/SSRF/CSRF), secret leakage in plaintext, weak crypto (MD5/SHA1/DES), supply-chain risks (deprecated deps, typosquat). Output JSON: { findings: [{ severity, title, line, remediation }], summary }. Severity: critical/high/medium/low. Use case: pre-merge PR review automatico, audit periodico repo legacy, CI gate su pattern vietati, due diligence code acquisition.
