{"agent":"claude","input":"Clone is not required if the repository is already in the sandbox. Read package.json (Juice Shop, Node 22-26, npm run serve), frontend/package.json (Angular 22), config/default.yml (port 3000) and the routes under routes/. Run the app on localhost only. Audit injection, broken access control, authentication flaws and sensitive data exposure. Start from routes/search.ts, routes/login.ts, lib/insecurity.ts, routes/payment.ts, routes/order.ts and routes/updateProductReviews.ts. For each finding write the file and line, one request that shows it against the running app, its severity and the fix, in security-audit.md. Do not paste private keys. Change no code.","resources":[{"url":"https://github.com/your-org/your-app"}]}