security-baseline-audit

Run a security baseline audit for web applications and APIs. Use when asked to assess auth and session handling, input validation, headers, CORS and CSRF, secret management, logging leakage, dependency risk, and pre-release security readiness.