Controller Pinning Audit — security audit and pinning tests for Laravel controllers

Paste a Laravel controller with its routes, models and form requests. Get a security audit (authorization and IDOR, mass assignment, SQL injection, validation, Blade XSS, CSRF, uploads, rate limits, password hashing, secrets, OWASP Top 10), then the Pest or PHPUnit feature tests that fail on today's code and pass once each fix lands. A free in-browser reader maps every route to its action and middleware first. Derived from the agent skills @affaan-m/laravel-security and @affaan-m/laravel-tdd. Independent tool, not affiliated with or endorsed by Laravel Holdings Inc.