Automated scanning combined with manual review covers risk points such as reverse cracking risk, local data storage security, interface security, identity authentication, and privacy data leakage, and issues formal security inspection reports and targeted rectification plans.