Run a comprehensive security and compliance review on this repository:
1. **SBOM Generation**: Scan all dependency files (e.g., package.json, requirements.txt, Cargo.toml) and generate a Software Bill of Materials in Markdown format, flagging any outdated or known vulnerable libraries.
2. **OWASP Audit**: Review the codebase against the OWASP Top 10 (or OWASP LLM Top 10 if applicable). Identify code locations susceptible to issues like SQL Injection, broken access control, or improper input validation.
3. **MITRE ATT&CK Mapping**: Map the system architecture against the MITRE ATT&CK framework. Highlight potential adversary tactics (e.g., Initial Access, Persistence, Credential Access) based on how our API endpoints and data flows are structured.
Provide the output as a structured Markdown document with code line references and concrete remediation steps.