Can a simple AI prompt compete with commercial SAST tools?