Embed Flask security recommendations inline instead of relying on URL fetching at runtime. Add structured sections for resource limits, XSS, CSRF, security headers, CSP, cookies, secrets, CORS, host validation, and additional checks. Include a grading rubric for audit summaries.