The check that never checked a file: reading code I didn't write
I generated a Linux persistence triage tool with an LLM, used it in a research project, and only read it properly much later. Its headline check had never examined a single file. What I found, why the tool still produced convincing output, and how to read code you didn’t write.