Scan supplied code with transparent deterministic rules for common secret, injection, shell, weak-hash, and Solidity risks. This is not a professional audit.