Security Audit Plugin - Evidence-based security scanning with anti-hallucination rules, interactive scan selection, and performance analysis. 40 categories including HIPAA, SOC 2, PCI-DSS, GDPR compliance, FIPS 140-3, token lifetime analysis, tunnel & DNS security, CVE/0-day auditing, and unused dependency detection.