I submitted a side-project extension for review and an AI bot found 4 real security bugs in it

I built a small Raycast extension - paste invoice JSON, get a formatted HTML/Markdown preview. Zero...