Paste server-side Lua and get the dangerous patterns flagged: events that trust the client, dynamic code execution, concatenated SQL and leaked secrets. Every finding explains the fix.
Narrows the rules to one engine, or runs everything.
Paste a file or the handler you are unsure about.