Turns out you can just get agents to do some apocryphal vulnerabilities research. Here’s two cuts from the output: