Pith. sign in

Paper Citation Record · LEDGER

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents

As of 9 August 2026, this Paper Citation Record lists 22 of 22 outbound references and 2 inbound Pith citation observations for arXiv:2507.09329.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2507.09329 v2

Coverage vector

measured 22 of 22 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-06T18:02:42.085434Z

measured 24 of 24 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-09T06:31:02.800959+00:00

measured 2 of 2 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-07T21:46:23.182040Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-08-07T21:46:23.443406Z

Reference resolution

22 of 22 outbound references displayed

  • verified exact0
  • verified fuzzy21
  • unresolved1
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation fe4d4c14-ddd4-4c19-9c98-c4999801a215 · outbound

This paper cites https://github.com/features/copilot.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents https://github.com/features/copilot

Reference 1

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.704292Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:02:40.038657Z digest=sha256:9006902b9dd778c1aefd2fec6e134563f8ec4d4e53c78fe1f831d9806740d7e9

Observation 55c7ef3c-33cf-4fcd-9ee1-19683614fd9a · outbound

This paper cites https://cursor.com.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents https://cursor.com

Reference 2

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.683533Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:02:40.157186Z digest=sha256:b71871fb33a16613a7e96f47e97310c8f89f2babf1eba655261550684dd1fc81

Observation f3219332-89c4-4857-b572-eea29ec9756d · outbound

This paper cites https://roocode.com.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents https://roocode.com

Reference 3

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.660500Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:02:40.281313Z digest=sha256:e64a3d8bd0af64b6af9d186af206c66fa58754a2a0258ad8c8e6f80601bebf6d

Observation aebaf56d-9707-40d7-bc7d-be6a40e11abc · outbound

This paper cites https://windsurf.com.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents https://windsurf.com

Reference 4

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.641847Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:02:40.371710Z digest=sha256:616d2fd4bc31fca70602a160f67b6be15d751ead8fdd1051f22333981275d723

Observation fa230111-2395-4892-b76b-a78927f407fb · outbound

This paper cites Xu, Xiangru Tang, Mingchen Zhuge, Jiayi Pan, Yueqi Song, Bowen Li, Jaskirat Singh, Hoang H.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Xu, Xiangru Tang, Mingchen Zhuge, Jiayi Pan, Yueqi Song, Bowen Li, Jaskirat Singh, Hoang H

Reference 5

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.619599Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:02:40.460648Z digest=sha256:ba7d8a7e363c40896e80eca3c53376e6a2da87619dda0d75c1316c5093d63b57

Observation a3397acb-1a33-4d42-aa36-5bc278e91ef6 · outbound

This paper cites Setupbench: Assessing software engineering agents’ ability to bootstrap development environments.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Setupbench: Assessing software engineering agents’ ability to bootstrap development environments

Reference 6

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.596178Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:02:40.542519Z digest=sha256:fd08891464887656acc387394a5ae5a29029bb27b9558acfaa444dac11a3d46d

Observation d4866330-081f-49f5-84ab-5a276017d883 · outbound

This paper cites Evolutionary multi-objective optimization of large language model prompts for balancing sentiments.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Evolutionary multi-objective optimization of large language model prompts for balancing sentiments

Reference 7

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.570236Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:02:40.588882Z digest=sha256:78096644dd02a301204140e3beff26ed98d1e3fe1d7e6ee8fffa4dea86792e3d

Observation 07b644fb-1a9c-40d0-a6af-f80a77dcdb67 · outbound

This paper cites Long-context llms struggle with long in-context learning.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Long-context llms struggle with long in-context learning

Reference 8

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.552354Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:02:40.677911Z digest=sha256:d85d42a36980a772c3532d209a837d068c7f798c90ea267609d67334355f2e9f

Observation bfae988d-ba42-4499-ad5b-420cbfaeab5c · outbound

This paper cites Guiding ai to fix its own flaws: An empirical study on llm-driven secure code generation.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Guiding ai to fix its own flaws: An empirical study on llm-driven secure code generation

Reference 9

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.533738Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:02:40.767402Z digest=sha256:4f42c65a3a50c5e183c3407b9a45b171803cc64969ad45c926ffd38540677390

Observation 57229a9b-4d1b-40b8-82ab-9e7d32dfce84 · outbound

This paper cites Wildfeedback: Aligning llms with in-situ user interactions and feedback.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Wildfeedback: Aligning llms with in-situ user interactions and feedback

Reference 10

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.512672Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:02:40.803061Z digest=sha256:7e70b7c4424a5f9c10809a88774e8c99222bb8018a21c71dd73def60ea1639d0

Observation fd471e1d-7a00-47b4-9b89-efef37a2a77b · outbound

This paper cites Llamafirewall: An open source guardrail system for building secure ai agents.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Llamafirewall: An open source guardrail system for building secure ai agents

Reference 11

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.487381Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:02:40.934454Z digest=sha256:93d7a88205670d4fbfc218574d3a6406f0f71158cfe242669e8582ee90256fb1

Observation 11e0d98e-808c-454d-8a14-03955e180c9a · outbound

This paper cites Poskitt, and Jun Sun.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Poskitt, and Jun Sun

Reference 12

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.463956Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:02:40.981498Z digest=sha256:567f9619e9d70d7d4ed95f09f3136591cd2a59dd3b9276d3124b18dbef526baf

Observation 258a07e6-be72-478c-a53d-1179abaaeac6 · outbound

This paper cites Llms cannot reliably identify and reason about security vulnerabilities (yet?): A compre- hensive evaluation, framework, and benchmarks.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Llms cannot reliably identify and reason about security vulnerabilities (yet?): A compre- hensive evaluation, framework, and benchmarks

Reference 13

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.447063Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:02:41.042473Z digest=sha256:dc6c4ca3c7b6bf98fbe5f2af6467e3f320ccafa6e5f02003b2a7ff5f22dbd2f9

Observation e151f69d-d5de-46c7-b778-0d265d3946a5 · outbound

This paper cites Easy problems that llms get wrong.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Easy problems that llms get wrong

Reference 14

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.423770Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:02:41.178962Z digest=sha256:c86b6d3a123879f9805b277ff59fafc095b7130f33babfcd7a0b0e57b2c5cf34

Observation fa4af836-190b-4d6e-93f6-39c006af2de5 · outbound

This paper cites Agent-safetybench: Evaluating the safety of llm agents.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Agent-safetybench: Evaluating the safety of llm agents

Reference 15

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.403232Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:02:41.272008Z digest=sha256:48f7850167798525bf31a8f646b61aad6edbda4a3b05898d2fdf6ffc4b8ad0ef

Observation 90bacb44-9843-4ff1-a828-151ac6c7ddbf · outbound

This paper cites Ignore previous prompt: Attack techniques for language models.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Ignore previous prompt: Attack techniques for language models

Reference 16

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.382837Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:02:41.321526Z digest=sha256:afd107cd48fc7fa48d040d1b1d1e39df2fe95b3fe078eb9912716cc0ea94f3aa

Observation eda23ffc-3ccb-424b-a3fb-ab422b5c2b92 · outbound

This paper cites Wolf hidden in sheep’s conversations: Toward harmless data-based backdoor attacks for jailbreaking large language models.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Wolf hidden in sheep’s conversations: Toward harmless data-based backdoor attacks for jailbreaking large language models

Reference 17

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.353748Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:02:41.441905Z digest=sha256:11440a8e324546fa64d2f5b4dc35467d705169baf9e9ae337ecef62dc06e510c

Observation 59498d64-a95c-4b82-a2d5-b3f04a888027 · outbound

This paper cites Securing ai agents with information-flow control.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Securing ai agents with information-flow control

Reference 18

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.334089Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:02:41.584065Z digest=sha256:1191455457bb53a67968e0a9a270ce57a7e9c01b30edab4deb57e8ca1b5b1661

Observation 8fa1ef79-e5dd-4769-bece-dc8dbd508d04 · outbound

This paper cites Choquette-Choo, Milad Nasr, Chawin Sitawarin, Gena Gibson, Andreas Terzis, and John "Four" Flynn.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Choquette-Choo, Milad Nasr, Chawin Sitawarin, Gena Gibson, Andreas Terzis, and John "Four" Flynn

Reference 19

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.314812Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:02:41.710794Z digest=sha256:28c4e95ce29b52bbd2bf780701b26ad5ac109b72dac733367cc094363d3efca3

Observation 08923cf7-a25f-44e0-acb8-5cca448c4f2a · outbound

This paper cites SWE-agent: Agent-computer interfaces enable automated soft- ware engineering.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents SWE-agent: Agent-computer interfaces enable automated soft- ware engineering

Reference 20

Resolution
unresolved
no resolver link, observed 2026-08-06T18:02:41.864946Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:02:41.864946Z digest=sha256:8b41409b4dca7c65fed08ab87659670555a2c69653ba0dd7c985c2288e696c86

Observation af9f3381-e5f9-4d01-8755-b6463dfdeeee · outbound

This paper cites Redcode: Risky code execution and generation benchmark for code agents.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents Redcode: Risky code execution and generation benchmark for code agents

Reference 21

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.273679Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:02:41.956579Z digest=sha256:c221a308a6823e4dea127c267bbdc080eb3d3ab670afe13a9929e042785d3299

Observation d19a72ec-8922-4c32-8702-d1ebf9541b3c · outbound

This paper cites thought.

When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents thought

Reference 22

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:02:42.254902Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:02:42.085434Z digest=sha256:d8c413f0e0cf821b4a87c20f009d2d7b0e1ee4f23a646e930e6a962d1f818d58

Pith citing papers

Observation 00b96736-6621-43b3-96db-d0ecb4c10ff8 · inbound

IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests cites this paper.

IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents

Reference 1

Resolution
unresolved
no resolver link, observed 2026-08-01T09:30:48.387916Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-01T09:30:48.387916Z digest=sha256:4b509880f0f031661012a789c43d952639347f41431816d5151fe04c1add9ec3

Observation b3f1c257-8c23-4208-ad9e-4c2310f8b43e · inbound

The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents cites this paper.

The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents

Reference 41

Resolution
metadata mismatch
local_arxiv, observed 2026-08-07T21:46:23.447632Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T21:46:23.182040Z digest=sha256:00d189c353d55f4c2047348ced648bf62e93522248790f81939dd7a708b5e9ed