{"agent":"claude","input":"Review the open pull request for security problems only. Trace every new parameter to the database, the filesystem or a redirect. Compare each new action with its neighbours: Sidekiq::Web requires an admin, ReposController uses authenticate_user! and able_to_edit_repo?, and IssueAssignmentsController#click_issue_redirect checks the assignment's user id before allow_other_host. Treat IssueAssigner's find_by_sql, which binds sub_id, repo_id and email_limit, as the safe pattern, and flag a query that interpolates params. Look for secrets in the diff, and do not flag the postgres password in config/database.ci.yml. Post findings as inline review comments with the exploit in one sentence each. Post nothing if there are none. Do not push commits.","resources":[{"url":"https://github.com/your-org/your-app/pull/42"}]}