Reviews changed code for exploitable defects, missing authorization, unsafe defaults, and secret leakage, reporting findings with evidence and fixes. Use when reviewing a pull request or a diff for security impact, performing a pre-merge security gate, or assessing whether a change introduces risk.