14 papers
Towards a Risk Assessment of Malicious Skill Files in Coding Agents
Rui Yang, Michael Fu, Kla Tantithamthavorn +2
Autonomous coding agents are increasingly embedded in enterprise software workflows with delegated authority over connected systems. Central to this architecture is the agent skill…
AgenticRepair: Multi-Faceted Program Context Engineering for Agentic Vulnerability Repair
Michael Fu, Qiyue Mei, Patanamon Thongtanunam +1
Automated vulnerability repair aims to reduce the time and effort required to patch security flaws from a vulnerability triage report. Recent agentic AI approaches have shown promi…
SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents
Rui Yang, Michael Fu, Kla Tantithamthavorn +2
Software engineering teams now deploy AI coding agents (Cursor, Claude Code, GitHub Copilot) as first-class productivity tools, installing domain-specific skill files to tailor age…
AI-Assisted Code Review as a Scaffold for Code Quality and Self-Regulated Learning: An Experience Report
Eduardo Oliveira, Michael Fu, Patanamon Thongtanunam +2
Code review is central to software engineering education but hard to scale in capstone projects due to tight deadlines, uneven peer feedback, and limited prior experience. We inves…
Evaluating Large Language Models for Multilingual Vulnerability Detection at Dual Granularities
Honglin Shu, Michael Fu, Junji Yu +4
Various deep learning-based approaches utilizing pre-trained language models (PLMs) have been proposed for automated vulnerability detection. With recent advancements in large lang…
IntelliSA: An Intelligent Static Analyzer for IaC Security Smell Detection Using Symbolic Rules and Neural Inference
Qiyue Mei, Michael Fu
Infrastructure as Code (IaC) enables automated provisioning of large-scale cloud and on-premise environments, reducing the need for repetitive manual setup. However, this automatio…