diff --git a/autoreview_demo.py b/autoreview_demo.py
new file mode 100644
index 0000000..7e68d76
--- /dev/null
+++ b/autoreview_demo.py
@@ -0,0 +1,6 @@
+def divide(a, b):
+    return a / b  # no zero-division guard
+
+def run_query(name):
+    # SQL injection: unsanitized string interpolation
+    return "SELECT * FROM users WHERE name = '" + name + "'"