There was "minimal analysis" of risk and no documented analysis of medical evidence against the family's explanation for the baby's injuries, a review has found.