Detection engine:
- 70+ high-quality rules with confidence levels (HIGH/MEDIUM/LOW)
- Zero tolerance for false positives: rules require user-controlled input evidence
- Fixed SQL injection: [+]?= matches plain = assignment
- Fixed XSS: catches echo/print with $_GET anywhere on line + $space brackets
- Fixed Command Injection: shell_exec/system/exec with any variable concat
- Fixed Path Traversal: LFI/RFI detection, excluded define() constants
- Added: NoSQL Injection, Stored XSS, DOM XSS, CSRF, Insecure File Upload
- Added: Insecure Session, Mass Assignment, SSRF (cloud metadata), Log4Shell
- Added: Confidence level per finding (HIGH/MEDIUM/LOW)
- Skip auto-generated dirs: node_modules, vendor, dist, build, __pycache__
- Smart prioritization: auth/sql/db/upload/admin paths scanned first
- Default 100 files, hard max 200

Report improvements:
- CVSS v3.1 per-vuln scores from OWASP mapping
- Risk distribution bar chart (text)
- Per-file table with C/H/M/L columns
- Structured finding cards with References section
- Remediation Roadmap (Immediate / Short-term / Long-term)
- Professional executive summary

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>