Scans a Rails app's own source with Ruby's stdlib Ripper parser (no Rails/bundler needed to run the scan itself) and reports: security findings (SQL injection, mass assignment, command injection, hardcoded secrets, unsafe deserialization, XSS-prone unescaped HTML, CSRF gaps, weak crypto, open redirects), near-duplicate code (token-normalized similarity across methods), and performance heuristics (N+1 queries, missing pagination, inefficient per-record save loops, unbounded full-table iteration). Every finding includes a human-reviewable suggested fix — nothing is auto-applied. Writes a detailed report as JSON and/or self-contained HTML (tmp/scryer_report.{json,html}). Ships a `scryer` executable for running outside a Rails app too, e.g. `scryer -o report.json -o report.html`. Also includes a runtime query watcher (N+1 / unused-eager-load detection via ActiveRecord instrumentation, opt-in) and a dependency vulnerability + insecure-source audit against OSV.dev.