@robryk @regehr @jamey Yes, some of those I think LLMs can find by inspection without much tooling. There's also the automation of hint extraction from existing CVEs to guide where to look (like "read all the CVEs for image loading libraries and summarize the common exploitable bugs, then build harnesses for each"). I'm no professional but in just a little experimentation it proved way too easy to find bug candidates than is healthy for the world.