What problem does it solve? Modern Next.js and AI-powered applications accumulate security risks across many layers—leaked secrets, SSRF-prone API routes, prompt injection vectors, unsafe HTML rendering, vulnerable dependencies, and missing security headers—and manual review of all of them is slow and error-prone. ## Core Features & Use Cases - Seven-Layer Audit Framework: Systematically covers secrets exposure, API/SSRF validation, prompt injection defenses, client-side XSS, dependency CVEs, HTTP security headers, and quantitative math safety. - Structured Reporting: Produces an executive summary, severity-categorized findings table with file references, and an actionable remediation plan. - Use Case: Before deploying a Next.js AI chatbot to production, run this audit to catch a hardcoded API key in git history, an unsanitized dangerouslySetInnerHTML usage, and a missing Content-Security-Policy header in one pass. ## Quick Start Run a full security audit of this codebase and report all critical and high severity findings with remediation steps.
