Exact prompt sent to every model
Below is a Node.js/Express endpoint that lets authenticated users upload profile documents to a client
portal, and a helper that serves them back. Perform a security review. List every vulnerability you
find with severity (Critical/High/Medium/Low), the line(s), and the concrete exploit. Then return the
fixed file(s) with // file: <path> first lines. Do not list theoretical issues you cannot point to
in the code.
A private fixture (eng-sec-01/src) is shown to the model but not published.
Responses
Latest published run: gemini-3.8-flash. For each model the repeat closest to its published median is shown; every repeat is in the repository.
No published attempts for this task yet
When the run is published, every model's raw response, per-dimension scores, judge rationales, human review notes and rendered artifacts appear here side by side.