Ask HN: I'm planning to build AI agents for auditing web app security

I have 2 challenges in this idea, 1. AI lacks the creativity 2. AI accessing tools

If I able to solve the challenges, can it be valuable?