PR #5724 up, it's part 2c of Issue #2721 (the shell-to-AST migration of SecurityAnalyzer). I would appreciate a critical review, please. 🙏

Thank you! Left a tiny comment from a pass

Thank you! On it