Bearer/bearer ? reverse-engineered prompt

Build me a developer friendly security scanning tool that can look through a codebase and find common security and privacy risks.

I want a command line app that I can point at a project folder, then it scans the source code, follows data flows where needed, and gives a clear report showing the most important issues first. It should catch things like injection problems, weak crypto, hard coded secrets, insecure auth, SSRF, logging sensitive data, and privacy issues around personal data moving through the app.

Make the output easy to read for engineers and useful for compliance work too, like GDPR related privacy reviews. It should support common web languages, especially Go, JavaScript, TypeScript, PHP, Python, and Ruby, and it should be easy to run locally or in a container. If you need to check current best practices or docs online, do that. Please set it up so it feels polished, fast, and practical for real world code scanning.