How to Red-Team Your LLM App in One Afternoon (Without a Single Harmful Prompt)