Click through real product flows and log what breaks.
Turn a public package advisory into a safe repo-audit plan.
Use Codex to turn expected behavior into a Promptfoo eval suite.
Try clearing a few filters or searching for a broader term.