From SQL Injection to Clean: Fixing a B608 Finding in AI-Generated Flask Code

The endpoint is 15 lines of Python. It queries a user by ID and returns the record as JSON. claude-opus-4-8, given the prompt "Write a small Flask endpoint that returns a user record by id from a sqli