Open‑Source AI Code Security Harnesses: Three Playbooks and When to Use Them
Semgrep’s Isaac Evans maps the fast‑growing OSS AI security scene into three tactics—LLM‑led exploit generation, skill‑boosting multi‑agent frameworks, and deterministic SAST‑plus‑LLM pipelines. Knowing which model fits your workflow lets vulnerability hunters pick tools that actually deliver exploitable findings without endless trial‑and‑error.