Parse raw Set-Cookie headers or Cookie strings. Inspect security flags, expiration, domain/path scope, and get a risk assessment for each cookie.