Security audit of application codebases. Use when analyzing code for exploitable vulnerabilities, authorization bypasses, or injection flaws, focusing strictly on PoC-backed, reproducible findings.