"your LLM is cool, but can it find vulns in curl"