As I recall, the initial vulnerability in Trivy was introduced by some clawbot. The article author has 5 Claude instances running.
Maybe the author correctly praises the research capabilities of Claude for some issues. Selecting an Iranian school as a target would be a counterexample.
But the generative parts augmented by claws are a huge and unconditional net negative.