anshchavda02/Phantomscan ? reverse-engineered prompt

Build me a Python security scanner called PhantomScan that I can run from the command line to check websites, APIs, and local app code for common vulnerabilities. It should support a quick scan, a full scan, and an advanced scan, with results shown in a clean report and also saved as JSON or HTML. I want it to look for things like leaked secrets, bad auth checks, IDOR issues, weak JWT or OAuth settings, misconfigured Supabase and Firebase backends, risky API endpoints, slopsquatting in dependencies, and basic network and TLS problems.

It should also have a hybrid mode where I can point it at a local source folder as well as a live target, then compare both for stronger findings. Please include a simple launcher so it works easily on Windows too, and add clear setup and usage instructions. If anything needs current library or docs info, look it up online and keep the whole thing practical and polished.