Use when the user wants a security check of a diff, an endpoint, or code handling input, auth or secrets.
