# Transcript: howto

A real finding in a sample support bot.
Install the CLI. It runs on your machine. No account.
One file sets the targets and the hosts it may touch.
Doctor checks that everything is ready.
One scan covers the AI side and the app side.
Every row names its engine. One check failed.
See the attack, the reply, and the fix.
Fix the code. Rerun with the same config. It passes.
Your AI agent is your newest attack surface.