Showing cs.CRShow all
3 papers · 1 filter
cs.CR2026
NameTrap: Steering AI Coding Agents Toward Security Vulnerabilities via Variable Names
Chieh-Yuan Chang, Guan-Wei Chen, Chia-Yi Hsu +3
AI coding agents routinely clone repositories, install packages, and read source code obtained from the Web, so publicly hosted code becomes part of the context that shapes the cod…
cs.CR2026
Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills
Yiyong Liu, Chia-Yi Hsu, Chun-Ying Huang +3
LLM-powered coding agents increasingly make software supply chain decisions. They generate imports, recommend packages, and write installation commands. Prior work showed that thes…
cs.CR2026
Harmless Yet Harmful: Neutral Prompting Attacks for Stealthy Hallucination Steering in Agent Skills
Chia-Yi Hsu, Chia-Mu Yu, Chun-Ying Huang +1
LLM-powered coding agents increasingly participate in software development workflows by generating code, selecting dependencies, and producing package installation commands. This c…