Your linter is like a spell checker for code. Great at catching typos, terrible at catching lies.
It'll yell at you for a missing semicolon but won't blink at a SQL injection sitting three lines above it. That's not a bug in your linter - it's a scope problem. Linters enforce style. Security lives somewhere else entirely: in the gap between code that runs and code that should run.
These nine patterns are syntactically perfect. They compile. They pass review. They clear CI. And they'll happily ruin your week when someone finds them before you do.
Iris Code catches all nine on every save. Let's walk through them.
1. Dynamic code execution
