Agentic triage of vulnerabilities