DropCart Live is a Laravel marketplace for limited sneaker releases. Its public Lighthouse GraphQL endpoint powers launch pages, stock widgets, and style recommendations. Anonymous visitors can POST their own GraphQL documents to `/graphql`, including many aliases or deeply nested `relatedDrops` selections. Review the GraphQL validation bootstrap and the resolver path used by launch-page recommendations.

SeedSafe is a non-custodial crypto wallet. During onboarding it shows the user a 12-word recovery phrase, and at login it shows a one-time code. Both screens have a handy copy button so users can paste the value into their notes or password manager. Review the wallet's clipboard handling and decide whether secrets are being treated safely.

TalentSift is a Spring Boot recruiting backend that screens job applicants. Recruiters upload candidate resumes as PDFs; the service extracts the text and hands it to an LLM agent wired up with function-calling tools so it can pull context and email candidates automatically. The agent runs whatever tool the model decides to call. A malicious applicant fully controls the free text inside the PDF they upload. Review how the extracted resume text reaches the model and what the agent is allowed to do with it.