{"agent":"claude","input":"Audit this Terraform module for security problems and write security-audit.md. Read versions.tf, main.tf, variables.tf, vpc-flow-logs.tf, the modules directory, every directory under examples, .pre-commit-config.yaml and .github/workflows/pre-commit.yml first. For the root module and each example run terraform init -backend=false, terraform validate, tflint with the repository's rule list, trivy config and checkov. Read the defaults of manage_default_security_group, default_security_group_ingress and egress, manage_default_network_acl and its default rules, map_public_ip_on_launch, enable_flow_log and the flow log group's retention and KMS variables. Group findings into changeable defaults, examples that leave a feature off, and resource definitions no input can make safe. Give each finding the rule id, file and line, and the variable or change that addresses it. List rules you could not evaluate without an AWS account. Change no code.","resources":[{"url":"https://github.com/your-org/your-app"}]}