adversarial testing for LLMs