# Agent PR X-Ray examples

> Canonical page: https://codevetter.com/xray

Agent PR X-Rays are static, portable exports from completed local reviews. They retain evidence state and keep failed, waived, missing, and unverified stages visible.

The public examples below use adjudicated synthetic benchmark ground truth. They are not claims about uploaded or private repositories.

- [SQL injection in a TypeScript lookup](https://codevetter.com/xray/ts-sql-injection) — The lookup builds SQL with user-controlled email input instead of a parameterized query.
- [Data race on a shared Go map](https://codevetter.com/xray/go-race-condition) — Multiple goroutines read and write the same map without a mutex or another synchronization boundary.
- [Path traversal in a Python file handler](https://codevetter.com/xray/py-path-traversal) — The requested filename is joined to the storage root without canonical containment validation.

## Public product links

- [CodeVetter](https://codevetter.com/)
- [Download](https://codevetter.com/download)
- [Documentation](https://codevetter.com/docs/)
- [Source](https://github.com/Codevetter/codevetter)