Pith. sign in

Paper Citation Record · LEDGER

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents

As of 18 August 2026, this Paper Citation Record lists 22 of 22 outbound references and 2 inbound Pith citation observations for arXiv:2507.09329.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2507.09329 v2

Coverage vector

measured 22 of 22 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-06T18:02:42.085434Z

measured 24 of 24 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-18T06:34:40.430872+00:00

measured 2 of 2 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-07T21:46:23.182040Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-08-07T21:46:23.443406Z

Reference resolution

22 of 22 outbound references displayed

  • verified exact0
  • verified fuzzy21
  • unresolved1
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation fe4d4c14-ddd4-4c19-9c98-c4999801a215 · outbound

This paper cites https://github.com/features/copilot.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents https://github.com/features/copilot

Reference 1

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.704292Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

source=pdf_text observed=2026-08-06T18:02:40.038657Z digest=sha256:bf86926505d1c08d6ca3d23d08b664fa1930111b270b0e67a1c8410db04ef63f

Observation 55c7ef3c-33cf-4fcd-9ee1-19683614fd9a · outbound

This paper cites https://cursor.com.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents https://cursor.com

Reference 2

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.683533Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

source=pdf_text observed=2026-08-06T18:02:40.157186Z digest=sha256:0bb1bd3ed3239c40d8e33b87581d79c27a9ded12ccadc2edaaeded5528ab6c01

Observation f3219332-89c4-4857-b572-eea29ec9756d · outbound

This paper cites https://roocode.com.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents https://roocode.com

Reference 3

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.660500Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

source=pdf_text observed=2026-08-06T18:02:40.281313Z digest=sha256:30f69b4975895a93c4e9912d31e9298bddbadf2632d1bdce00ca148dbcfba8bb

Observation aebaf56d-9707-40d7-bc7d-be6a40e11abc · outbound

This paper cites https://windsurf.com.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents https://windsurf.com

Reference 4

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.641847Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

source=pdf_text observed=2026-08-06T18:02:40.371710Z digest=sha256:4cc391ccd7b2f021061254674f9da52484f4d9d7d3112e3fd6cdc232bd8bb801

Observation fa230111-2395-4892-b76b-a78927f407fb · outbound

This paper cites Xu, Xiangru Tang, Mingchen Zhuge, Jiayi Pan, Yueqi Song, Bowen Li, Jaskirat Singh, Hoang H.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Xu, Xiangru Tang, Mingchen Zhuge, Jiayi Pan, Yueqi Song, Bowen Li, Jaskirat Singh, Hoang H

Reference 5

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.619599Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

source=pdf_text observed=2026-08-06T18:02:40.460648Z digest=sha256:6d8f8a4fcda2d1f104dec59dee7868afeaab3b1f76f3e913bbbde69fc6240d3c

Observation a3397acb-1a33-4d42-aa36-5bc278e91ef6 · outbound

This paper cites Setupbench: Assessing software engineering agents’ ability to bootstrap development environments.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Setupbench: Assessing software engineering agents’ ability to bootstrap development environments

Reference 6

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.596178Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

source=pdf_text observed=2026-08-06T18:02:40.542519Z digest=sha256:c004d9d1848e4c9332b3285f1e73912db034f30c773af63129c0d249195cab05

Observation d4866330-081f-49f5-84ab-5a276017d883 · outbound

This paper cites Evolutionary multi-objective optimization of large language model prompts for balancing sentiments.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Evolutionary multi-objective optimization of large language model prompts for balancing sentiments

Reference 7

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.570236Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

source=pdf_text observed=2026-08-06T18:02:40.588882Z digest=sha256:37b522563ea042f40d9771b101f8f819d9acac0478000404a3be7035ac1d7780

Observation 07b644fb-1a9c-40d0-a6af-f80a77dcdb67 · outbound

This paper cites Long-context llms struggle with long in-context learning.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Long-context llms struggle with long in-context learning

Reference 8

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.552354Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

source=pdf_text observed=2026-08-06T18:02:40.677911Z digest=sha256:252d16ee9f1ab192f610a811c848d479226e9178129ac8d759c5bc26450031d4

Observation bfae988d-ba42-4499-ad5b-420cbfaeab5c · outbound

This paper cites Guiding ai to fix its own flaws: An empirical study on llm-driven secure code generation.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Guiding ai to fix its own flaws: An empirical study on llm-driven secure code generation

Reference 9

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.533738Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

source=pdf_text observed=2026-08-06T18:02:40.767402Z digest=sha256:1d5cea226d027214e1d9b13c3be1751294a20b34deef15d376a4f1a0d4cabff6

Observation 57229a9b-4d1b-40b8-82ab-9e7d32dfce84 · outbound

This paper cites Wildfeedback: Aligning llms with in-situ user interactions and feedback.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Wildfeedback: Aligning llms with in-situ user interactions and feedback

Reference 10

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.512672Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

source=pdf_text observed=2026-08-06T18:02:40.803061Z digest=sha256:f0f7c1987379d957839b78ffa962023899d43e69a187cbfff1e0148b1797c7cd

Observation fd471e1d-7a00-47b4-9b89-efef37a2a77b · outbound

This paper cites Llamafirewall: An open source guardrail system for building secure ai agents.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Llamafirewall: An open source guardrail system for building secure ai agents

Reference 11

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.487381Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

source=pdf_text observed=2026-08-06T18:02:40.934454Z digest=sha256:551aebc83deeead074c16f5e2e18b98c05b7b2d8a9fb732a833e6ceb2de3b62f

Observation 11e0d98e-808c-454d-8a14-03955e180c9a · outbound

This paper cites Poskitt, and Jun Sun.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Poskitt, and Jun Sun

Reference 12

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.463956Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

source=pdf_text observed=2026-08-06T18:02:40.981498Z digest=sha256:216f077ceaf8354d1a3deb453902130e01925631180048c99effb569216df3f8

Observation 258a07e6-be72-478c-a53d-1179abaaeac6 · outbound

This paper cites Llms cannot reliably identify and reason about security vulnerabilities (yet?): A compre- hensive evaluation, framework, and benchmarks.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Llms cannot reliably identify and reason about security vulnerabilities (yet?): A compre- hensive evaluation, framework, and benchmarks

Reference 13

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.447063Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

source=pdf_text observed=2026-08-06T18:02:41.042473Z digest=sha256:bb58336ad9a473bd591f0548b4be9b67c8ed3125d6ee7e4c3c0c2089157a7988

Observation e151f69d-d5de-46c7-b778-0d265d3946a5 · outbound

This paper cites Easy problems that llms get wrong.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Easy problems that llms get wrong

Reference 14

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.423770Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

source=pdf_text observed=2026-08-06T18:02:41.178962Z digest=sha256:0dd4cce05f9ec01fd75aef2ff4aafc72617e5ea1f4e729828cbc148c0f33bdab

Observation fa4af836-190b-4d6e-93f6-39c006af2de5 · outbound

This paper cites Agent-safetybench: Evaluating the safety of llm agents.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Agent-safetybench: Evaluating the safety of llm agents

Reference 15

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.403232Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

source=pdf_text observed=2026-08-06T18:02:41.272008Z digest=sha256:7e59288c300f9b2daeaf7d649a91a9de5a04bffb82eab550acee822948db7ca2

Observation 90bacb44-9843-4ff1-a828-151ac6c7ddbf · outbound

This paper cites Ignore previous prompt: Attack techniques for language models.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Ignore previous prompt: Attack techniques for language models

Reference 16

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.382837Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

source=pdf_text observed=2026-08-06T18:02:41.321526Z digest=sha256:650765c27f94c7e5cc8f4caece568bd97fd4a1f77bebe044ee8b743cd2044cc1

Observation eda23ffc-3ccb-424b-a3fb-ab422b5c2b92 · outbound

This paper cites Wolf hidden in sheep’s conversations: Toward harmless data-based backdoor attacks for jailbreaking large language models.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Wolf hidden in sheep’s conversations: Toward harmless data-based backdoor attacks for jailbreaking large language models

Reference 17

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.353748Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

source=pdf_text observed=2026-08-06T18:02:41.441905Z digest=sha256:60e0cb28097e5aa59520f6d69a91140cb894966485eef92764646f3913d58faa

Observation 59498d64-a95c-4b82-a2d5-b3f04a888027 · outbound

This paper cites Securing ai agents with information-flow control.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Securing ai agents with information-flow control

Reference 18

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.334089Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

source=pdf_text observed=2026-08-06T18:02:41.584065Z digest=sha256:67dd42af2c00dab3d68c3fbd0b13db2bcf08c440175918bcaae3d357782cd70f

Observation 8fa1ef79-e5dd-4769-bece-dc8dbd508d04 · outbound

This paper cites Choquette-Choo, Milad Nasr, Chawin Sitawarin, Gena Gibson, Andreas Terzis, and John "Four" Flynn.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Choquette-Choo, Milad Nasr, Chawin Sitawarin, Gena Gibson, Andreas Terzis, and John "Four" Flynn

Reference 19

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.314812Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

source=pdf_text observed=2026-08-06T18:02:41.710794Z digest=sha256:29743d4833561285fae699e25b104f1acbca4e33461e30b67e45820b4dd8ba27

Observation 08923cf7-a25f-44e0-acb8-5cca448c4f2a · outbound

This paper cites SWE-agent: Agent-computer interfaces enable automated soft- ware engineering.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents SWE-agent: Agent-computer interfaces enable automated soft- ware engineering

Reference 20

Resolution
unresolved
no resolver link, observed 2026-08-06T18:02:41.864946Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:02:41.864946Z digest=sha256:91f62993c37a2b89b25dba7126e9c4a456d7f95a6a10dbf807b9a78c6f93b4c1

Observation af9f3381-e5f9-4d01-8755-b6463dfdeeee · outbound

This paper cites Redcode: Risky code execution and generation benchmark for code agents.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Redcode: Risky code execution and generation benchmark for code agents

Reference 21

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.273679Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

source=pdf_text observed=2026-08-06T18:02:41.956579Z digest=sha256:a8a514751892b8a5a3d032d3f077a413258f918915baa750188760f9842c0c90

Observation d19a72ec-8922-4c32-8702-d1ebf9541b3c · outbound

This paper cites thought.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents thought

Reference 22

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.254902Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

source=pdf_text observed=2026-08-06T18:02:42.085434Z digest=sha256:3d47c54ec945394576871198cddb511f436dba61692cda6fc879504701162442

Pith citing papers

Observation 00b96736-6621-43b3-96db-d0ecb4c10ff8 · inbound

IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests cites this paper.

IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents

Reference 1

Resolution
unresolved
no resolver link, observed 2026-08-01T09:30:48.387916Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-01T09:30:48.387916Z digest=sha256:c351a17618763463076c119a9b180b2e18ef1560174a64f4d7dc510962b7fcac

Observation b3f1c257-8c23-4208-ad9e-4c2310f8b43e · inbound

The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents cites this paper.

The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents

Reference 41

Resolution
metadata mismatch
local_arxiv, observed 2026-08-07T21:46:23.447632Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

source=arxiv_source observed=2026-08-07T21:46:23.182040Z digest=sha256:1b9e712a0b6f67afeb280c78062a44edc86edc182cc02ffb467a02dcc2071bc4