Beyond the Payload: How User Invocation Shapes Coding Agent Vulnerability to Repository Poisoning
CIPR (Coding In Poisoned Repos), the first benchmark that systematically varies PLCs in poisoned real-world repositories, is introduced and highlights that coding agent vulnerability is not a static property, but a dynamic outcome shaped by everyday user configurations.
Fu-Kang Zhu, Binbin Zhao, Ruixiao Lin et al.
· 0 citations