20.26Security-review agent

Prompt:

Inspect changes for:

- hardcoded credentials
- production identifiers
- secret logging
- Authorization header logging
- full payload logging
- PII/PHI leakage
- over-broad Salesforce permissions assumptions
- insecure endpoint configuration
- environment-specific values committed to code

Report findings with file/line and remediation.