SOURCE-LINKED INTELLIGENCE

Beyond the Payload: How User Invocation Shapes Coding Agent Vulnerability to Repository Poisoning

arXiv · AI, language, vision and robotics · article · Aug 31, 2026 · UTC

Coding agents are increasingly used for software engineering tasks, including bootstrapping projects from third-party repositories whose integrity cannot be assumed. Prior work on repository poisoning largely focuses on attacker-controlled injection and disguise, but developers also shape risk through everyday invocation choices: what task to delegate, how to phrase the request, and which skills or rules to supply. We term these user-side choices Prompt-Level Configurations (PLCs) and introduce CIPR (Coding In Poisoned Repos), the first benchmark that systematically varies PLCs in poisoned rea

Read original source ↗ Open in workspace

recordType

paper

region

Global