Security Audit Checklist Generator

Generate a security audit checklist for my application.

**Stack:** [YOUR_FULL_STACK — e.g., "Next.js, PostgreSQL, Stripe, AWS S3, JWT auth"]
**Type:** [WEB_APP / API / MOBILE_BACKEND / etc.]
**Handles sensitive data:** [YES/NO — what kind?]

Generate a checklist organized by category:

### Authentication & Authorization
- [ ] Check 1 — how to verify, what to look for, severity (Critical/High/Medium/Low)

### Input Validation & Injection
- [ ] Check 2 ...

### Data Protection
### API Security
### Infrastructure
### Dependencies
### Session Management
### Error Handling & Logging

For each check:
- What to look for (specific patterns or configurations)
- How to test it (manual step or automated tool)
- Fix if vulnerable (code snippet or configuration change)
- Severity level

Also include:
- Recommended security headers (Content-Security-Policy, etc.) with exact values
- npm audit / dependency scanning setup
- Rate limiting recommendations for each endpoint type
- OWASP Top 10 coverage mapping