סורק אבטחת מידע לפרויקטי Vibe Coding

Act as a Senior Cyber-Security Expert. 
Scan the following code for security vulnerabilities typical in rapid AI development.

CRITICAL CHECKS:
1. SENSITIVE KEYS: Are there hardcoded API keys or environment variables in client-side code?
2. AUTHENTICATION: Is every API route protected by session validation?
3. DATABASE: Is data fetched with user-specific IDs (e.g. `where user_id = current_user`)?
4. SANITIZATION: Are user inputs treated as raw data or potentially executable instructions?

Output a severity report (Low/High/Critical) for each finding.