LLM-based Vulnerability Discovery through the Lens of Code Metrics