auth/login.js1 finding
12const user = await db.find(
13 `SELECT * FROM users WHERE id=${id}`
14);
SQL injection risk. Use a parameterized query. Suggested fix is ready.
01 / 03Security · AI agents
Exhibit A
An AI agent that reviews code for security issues and explains each one like a helpful teammate.
- Problem
- Security reports are long and hard to act on.
- Design
- One finding at a time, in context, with a fix attached.
