Do Users Write More Insecure Code with AI Assistants?
Not on the map. Why?
Cited by 35 in LLM agents and tool use, but placed by its own abstract, which didn’t fit.
Abstract (arXiv)
We conduct the first large-scale user study examining how users interact with an AI Code assistant to solve a variety of security related tasks across different programming languages. Overall, we find that participants who had access to an AI assistant based on OpenAI's codex-davinci-002 model wrote significantly less secure code than those without access. Additionally, participants with access to an AI assistant were more likely to believe they wrote secure code than those without access to the AI assistant. Furthermore, we find that participants who trusted the AI less and engaged more with the language and format of their prompts (e.g. re-phrasing, adjusting temperature) provided code with fewer security vulnerabilities. Finally, in order to better inform the design of future AI-based Code assistants, we provide an in-depth analysis of participants' language and interaction behavior, as well as release our user interface as an instrument to conduct similar studies in the future.
Key facts. Cited by 186 papers in the map (data through 7 Oct 2026). First posted on arXiv 7 Nov 2022.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2022: 1; 2023: 19; 2024: 43; 2025: 56; 2026: 67.
186 papers.
Sort:
By area:
- 2023Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedbackcited by 743
- 2025Emergent Misalignment: Narrow finetuning can produce broadly misaligned LLMscited by 158
- 2024LLM Critics Help Catch LLM Bugscited by 138
- 2024Language Models Learn to Mislead Humans via RLHFcited by 118
- 2023Learning Performance-Improving Code Editscited by 103
- 2024Formal Mathematical Reasoning: A New Frontier in AIcited by 80
- 2023Overthinking the Truth: Understanding how Language Models Process False Demonstrationscited by 78
- 2023Can ChatGPT replace StackOverflow? A Study on Robustness and Reliability of Large Language Model Code Generationcited by 72
- 2024Large Language Models for Cyber Security: A Systematic Literature Reviewcited by 65
- 2022Parsel: Algorithmic Reasoning with Language Models by Composing Decompositionscited by 62
- 2023Clover: Closed-Loop Verifiable Code Generationcited by 62
- 2024We Have a Package for You! A Comprehensive Analysis of Package Hallucinations by Code Generating LLMscited by 61
38 more
- 2023Computing Education in the Era of Generative AIcited by 50
- 2024A Performance Study of LLM-Generated Code on Leetcodecited by 48
- 2023TrojanPuzzle: Covertly Poisoning Code-Suggestion Modelscited by 47
- 2023Large Language Models and Simple, Stupid Bugscited by 45
- 2023RepoFusion: Training Code Models to Understand Your Repositorycited by 40
- 2023Thrilled by Your Progress! Large Language Models (GPT-4) No Longer Struggle to Pass Assessments in Higher Education Programming Coursescited by 38
- 2026SWE-chat: Coding Agent Interactions From Real Users in the Wildcited by 36
- 2023SALLM: Security Assessment of Generated Codecited by 35
- 2024Constrained Decoding for Secure Code Generationcited by 35
- 2024Automatic Programming: Large Language Models and Beyondcited by 35
- 2024Prompting Techniques for Secure Code Generation: A Systematic Investigationcited by 33
- 2024AlphaVerus: Bootstrapping Formally Verified Code Generation through Self-Improving Translation and Treefinementcited by 33
- 2026Dive into Claude Code: The Design Space of Today's and Future AI Agent Systemscited by 33
- 2023The FormAI Dataset: Generative AI in Software Security Through the Lens of Formal Verificationcited by 32
- 2026Agentic Much? Adoption of Coding Agents on GitHubcited by 31
- 2023Democratising AI: Multiple Meanings, Goals, and Methodscited by 29
- 2023The Shaky Foundations of Clinical Foundation Models: A Survey of Large Language Models and Foundation Models for EMRscited by 29
- 2024The RealHumanEval: Evaluating Large Language Models' Abilities to Support Programmerscited by 28
- 2024Toward Secure Code Generation: Bridging Correctness and Security via Task-Adaptive Vulnerability Modeling and Execution-Based Benchmarkingcited by 26
- 2024Do Large Language Models Perform the Way People Expect? Measuring the Human Generalization Functioncited by 24
- 2025The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMscited by 24
- 2024NoFunEval: Funny How Code LMs Falter on Requirements Beyond Functional Correctnesscited by 23
- 2024Learning Agent-based Modeling with LLM Companions: Experiences of Novices and Experts Using ChatGPT & NetLogo Chatcited by 23
- 2024How secure is AI-generated Code: A Large-Scale Comparison of Large Language Modelscited by 23
- 2025Speed at the Cost of Quality: How Cursor AI Increases Short-Term Velocity and Long-Term Complexity in Open-Source Projectscited by 23
- 2024PerfCodeGen: Improving Performance of LLM Generated Code with Execution Feedbackcited by 22
- 2024LLMs in Web Development: Evaluating LLM-Generated PHP Code Unveiling Vulnerabilities and Limitationscited by 21
- 2024Generative Monoculture in Large Language Modelscited by 21
- 2023Generation Probabilities Are Not Enough: Uncertainty Highlighting in AI Code Completionscited by 20
- 2023The Intended Uses of Automated Fact-Checking Artefacts: Why, How and Whocited by 19
- 2025Security and Quality in LLM-Generated Code: A Multi-Language, Multi-Model Analysiscited by 18
- 2024PromSec: Prompt Optimization for Secure Generation of Functional Source Code with Large Language Models (LLMs)cited by 17
- 2025Correctness Assessment of Code Generated by Large Language Models Using Internal Representationscited by 17
- 2023Enhancing Large Language Models for Secure Code Generation: A Dataset-driven Study on Vulnerability Mitigationcited by 14
- 2025CodeIF-Bench: Evaluating Instruction-Following Capabilities of Large Language Models in Interactive Code Generationcited by 14
- 2025"Your AI, My Shell": Demystifying Prompt Injection Attacks on Agentic AI Coding Editorscited by 14
- 2024Rocks Coding, Not Development--A Human-Centric, Experimental Evaluation of LLM-Supported SE Taskscited by 13
- 2024LiCoEval: Evaluating LLMs on License Compliance in Code Generationcited by 13
50 most cited of 186 All 186 (JSON)
- 2026Groundability, Not Scale Alone: When Weak Reviewers Can Audit Strong Coding Agents1 Oct 2026
- 2026A Study of the Reliability of Agentic AI-Generated Programs16 Sep 2026
- 2026Not All Agents Are Equal: Code Quality and Post-Merge Maintenance Across Five Autonomous Coding Agents in the Wild12 Sep 2026
- 2026If It's Not Buggy, Don't Fix It: On the Dynamics of Iterative Bug-fixing with LLMs9 Sep 2026
- 2026Compared to What? A Human-Anchored Security Benchmark for LLM-Generated Infrastructure-as-Code28 Aug 2026
- 2026Trustworthy RAG: An Evaluation Agent for Detecting Misinformation and Knowledge Poisoning in Generative AI Systems21 Aug 2026
- 2026Vibe Coding and Web Application Security: A Twin-Prompt Study21 Aug 2026
- 2026Measuring What a Specification Determines: A Formal Semantic-Block Model and an Execution-Judged Benchmark19 Aug 2026
- 2026Detecting Contaminated Code-Generation Prompt Batches via Influence Functions14 Aug 2026
- 2026Engineering Reliable Coding Agents: Evaluating and Operating the System Around the Model14 Aug 2026
- 2026Security-First Evaluation of Text-to-Terraform: Benchmarking LLMs and SLMs for Secure IaC Generation2 Aug 2026
- 2026EduPluginBench: Executable Assurance for AI-Generated Educational Plugins1 Aug 2026
38 more
- 2026SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents28 Jul 2026
- 2026Poster: Rethinking Security in LLM Code Generation through Real-World Risk Scenarios25 Jul 2026
- 2026Tool-Guided Retrieval-Augmented Repair for Securing LLM-Generated C Code21 Jul 2026
- 2026The Aura in the Machine: Genealogy and the Status of the Work of Art in the Generative Era20 Jul 2026
- 2026From Adoption to Deployment: A Qualitative Study on AI Integration in Software Development Practice18 Jul 2026
- 2026Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents16 Jul 2026
- 2026Large Language Models for Code Generation from Multilingual Prompts: A Curated Benchmark and a Study on Code Quality16 Jul 2026
- 2026Skills That Don't Exist: A Large-Scale Study of Hallucinated Skill Recommendation in LLM Agents14 Jul 2026
- 2026Understanding the Impact of AI Code Assistants on Security API Usage: An Empirical Study13 Jul 2026
- 2026Do These Violent Delights Have Violent Ends? Measuring the Post-Merge Fate of Agentic Code10 Jul 2026
- 2026TrustX Agent Risk Classification Framework (ARC): Risk-Tiering Internally Created Agentic AI Systems10 Jul 2026
- 2026Functional and Secure Code Generation with Task Vectors8 Jul 2026
- 2026Multi-Channel Spread-Spectrum Code Watermarking7 Jul 2026
- 2026Builder, Defender, Breaker: Measurable Independence and Bounded Autonomy When Generative Models Build, Defend and Test Software3 Jul 2026
- 2026An Empirical Study of Security Calibration in Large Language Models for Code30 Jun 2026
- 2026When Passing Tests Hides Vulnerabilities: An Empirical Study of Silent Failures in Agentic Systems25 Jun 2026
- 2026Helpful or Harmful? Evaluating LLM-Assisted Vulnerability Patching via a Human Study24 Jun 2026
- 2026SoK: AI Secure Code Generation: Progress, Pitfalls, and Paths Forward23 Jun 2026
- 2026Secure Coding Drift in LLM-Assisted Post-Quantum Cryptography Development: A Gamified Fix17 Jun 2026
- 2026SEVRA-BENCH: Social Engineering of Vulnerabilities in Review Agents11 Jun 2026
- 2026Learn from Your Mistakes: Tree-like Self-Play for Secure Code LLMs2 Jun 2026
- 2026What Breaks When LLMs Code? Characterizing Operational Safety Failures of Agentic Code Assistants29 May 2026
- 2026An Empirical Evaluation of LLM-Generated Code Security Across Prompting Methods22 May 2026
- 2026Security of LLM-generated Code: A Comparative Analysis21 May 2026
- 2026FuzzingBrain V2: A Multi-Agent LLM System for Automated Vulnerability Discovery and Reproduction20 May 2026
- 2026Quality and Security Signals in AI-Generated Python Refactoring Pull Requests20 May 2026
- 2026Proximal State Nudging: Reducing Skill Atrophy from AI Assistance19 May 2026
- 2026Engineering Robustness into Personal Agents with the AI Workflow Store11 May 2026
- 2026To What Extent Does Agent-generated Code Require Maintenance? An Empirical Study7 May 2026
- 2026Bridging Generation and Training: A Systematic Review of Quality Issues in LLMs for Code6 May 2026
- 2026Accountable Agents in Software Engineering: An Analysis of Terms of Service and a Research Roadmap6 May 2026
- 2026The Conversations Beneath the Code: Triadic Data for Long-Horizon Software Engineering Agents4 May 2026
- 2026Rewriting the Response Path: Silent Tampering and Provider-Signed Defense in BYOK LLM Agents4 May 2026
- 2026SWE-chat: Coding Agent Interactions From Real Users in the Wild22 Apr 2026
- 2026A Quasi-Experimental Developer Study of Security Training in LLM-Assisted Web Application Development20 Apr 2026
- 2026Surgical Repair of Insecure Code Generation in LLMs17 Apr 2026
- 2026Dive into Claude Code: The Design Space of Today's and Future AI Agent Systems14 Apr 2026
- 2026Broken by Default: A Formal Verification Study of Security Vulnerabilities in AI-Generated Code7 Apr 2026
50 newest of 186 All 186 (JSON)
- 2026SWE-chat: Coding Agent Interactions From Real Users in the Wildcited by 36
- 2026Dive into Claude Code: The Design Space of Today's and Future AI Agent Systemscited by 33
- 2026Agentic Much? Adoption of Coding Agents on GitHubcited by 31
- 2024Learning Agent-based Modeling with LLM Companions: Experiences of Novices and Experts Using ChatGPT & NetLogo Chatcited by 23
- 2025Speed at the Cost of Quality: How Cursor AI Increases Short-Term Velocity and Long-Term Complexity in Open-Source Projectscited by 23
- 2025"Your AI, My Shell": Demystifying Prompt Injection Attacks on Agentic AI Coding Editorscited by 14
- 2025Takedown: How It's Done in Modern Coding Agent Exploitscited by 6
- 2026Promises, Perils, and (Timely) Heuristics for Mining Coding Agent Activitycited by 6
- 2025How Safe Are AI-Generated Patches? A Large-scale Study on Security Risks in LLM and Agentic Automated Program Repair on SWE-benchcited by 5
- 2026More Code, Less Reuse: Investigating Code Quality and Reviewer Sentiment towards AI-generated Pull Requestscited by 5
- 2026Comparing AI Coding Agents: A Task-Stratified Analysis of Pull Request Acceptancecited by 3
- 2026FuzzingBrain V2: A Multi-Agent LLM System for Automated Vulnerability Discovery and Reproductioncited by 3
12 most cited of 34 All 34 (JSON)
- 2026Groundability, Not Scale Alone: When Weak Reviewers Can Audit Strong Coding Agents1 Oct 2026
- 2026A Study of the Reliability of Agentic AI-Generated Programs16 Sep 2026
- 2026Not All Agents Are Equal: Code Quality and Post-Merge Maintenance Across Five Autonomous Coding Agents in the Wild12 Sep 2026
- 2026Engineering Reliable Coding Agents: Evaluating and Operating the System Around the Model14 Aug 2026
- 2026SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents28 Jul 2026
- 2026Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents16 Jul 2026
- 2026Skills That Don't Exist: A Large-Scale Study of Hallucinated Skill Recommendation in LLM Agents14 Jul 2026
- 2026Do These Violent Delights Have Violent Ends? Measuring the Post-Merge Fate of Agentic Code10 Jul 2026
- 2026TrustX Agent Risk Classification Framework (ARC): Risk-Tiering Internally Created Agentic AI Systems10 Jul 2026
- 2026When Passing Tests Hides Vulnerabilities: An Empirical Study of Silent Failures in Agentic Systems25 Jun 2026
- 2026SoK: AI Secure Code Generation: Progress, Pitfalls, and Paths Forward23 Jun 2026
- 2026SEVRA-BENCH: Social Engineering of Vulnerabilities in Review Agents11 Jun 2026
12 newest of 34 All 34 (JSON)
- 2024LLM Critics Help Catch LLM Bugscited by 138
- 2024Formal Mathematical Reasoning: A New Frontier in AIcited by 80
- 2023Overthinking the Truth: Understanding how Language Models Process False Demonstrationscited by 78
- 2022Parsel: Algorithmic Reasoning with Language Models by Composing Decompositionscited by 62
- 2025Benchmarking Prompt Engineering Techniques for Secure Code Generation with GPT Modelscited by 12
- 2025Benchmarking Prompt Engineering Techniques for Secure Code Generation with GPT Models9 Feb 2025
- 2024Formal Mathematical Reasoning: A New Frontier in AI20 Dec 2024
- 2024LLM Critics Help Catch LLM Bugs28 Jun 2024
- 2023Overthinking the Truth: Understanding how Language Models Process False Demonstrations18 Jul 2023
- 2022Parsel: Algorithmic Reasoning with Language Models by Composing Decompositions20 Dec 2022
- 2025A Retrieval-Augmented Generation Approach to Extracting Algorithmic Logic from Neural Networkscited by 11
- 2025RAG-Pull: Turning Retrieval into a Code-Injection Channel via Invisible Unicode Perturbationscited by 4
- 2026Trustworthy RAG: An Evaluation Agent for Detecting Misinformation and Knowledge Poisoning in Generative AI Systemscited by 0
- 2026Trustworthy RAG: An Evaluation Agent for Detecting Misinformation and Knowledge Poisoning in Generative AI Systems21 Aug 2026
- 2025A Retrieval-Augmented Generation Approach to Extracting Algorithmic Logic from Neural Networks3 Dec 2025
- 2025RAG-Pull: Turning Retrieval into a Code-Injection Channel via Invisible Unicode Perturbations13 Oct 2025
- 2024AlphaVerus: Bootstrapping Formally Verified Code Generation through Self-Improving Translation and Treefinementcited by 33
- 2025Secure-Instruct: An Automated Pipeline for Synthesizing Instruction-Tuning Datasets Using LLMs for Secure Code Generationcited by 2
- 2026Learn from Your Mistakes: Tree-like Self-Play for Secure Code LLMscited by 0
- 2026Learn from Your Mistakes: Tree-like Self-Play for Secure Code LLMs2 Jun 2026
- 2025Secure-Instruct: An Automated Pipeline for Synthesizing Instruction-Tuning Datasets Using LLMs for Secure Code Generation8 Oct 2025
- 2024AlphaVerus: Bootstrapping Formally Verified Code Generation through Self-Improving Translation and Treefinement9 Dec 2024
- 2023Learning Performance-Improving Code Editscited by 103
- 2023Can ChatGPT replace StackOverflow? A Study on Robustness and Reliability of Large Language Model Code Generationcited by 72
- 2024Large Language Models for Cyber Security: A Systematic Literature Reviewcited by 65
- 2023Clover: Closed-Loop Verifiable Code Generationcited by 62
- 2024We Have a Package for You! A Comprehensive Analysis of Package Hallucinations by Code Generating LLMscited by 61
- 2023Computing Education in the Era of Generative AIcited by 50
- 2024A Performance Study of LLM-Generated Code on Leetcodecited by 48
- 2023TrojanPuzzle: Covertly Poisoning Code-Suggestion Modelscited by 47
- 2023Large Language Models and Simple, Stupid Bugscited by 45
- 2023RepoFusion: Training Code Models to Understand Your Repositorycited by 40
- 2023Thrilled by Your Progress! Large Language Models (GPT-4) No Longer Struggle to Pass Assessments in Higher Education Programming Coursescited by 38
- 2023SALLM: Security Assessment of Generated Codecited by 35
12 most cited of 138 All 138 (JSON)
- 2026If It's Not Buggy, Don't Fix It: On the Dynamics of Iterative Bug-fixing with LLMs9 Sep 2026
- 2026Compared to What? A Human-Anchored Security Benchmark for LLM-Generated Infrastructure-as-Code28 Aug 2026
- 2026Vibe Coding and Web Application Security: A Twin-Prompt Study21 Aug 2026
- 2026Measuring What a Specification Determines: A Formal Semantic-Block Model and an Execution-Judged Benchmark19 Aug 2026
- 2026Detecting Contaminated Code-Generation Prompt Batches via Influence Functions14 Aug 2026
- 2026Security-First Evaluation of Text-to-Terraform: Benchmarking LLMs and SLMs for Secure IaC Generation2 Aug 2026
- 2026EduPluginBench: Executable Assurance for AI-Generated Educational Plugins1 Aug 2026
- 2026Poster: Rethinking Security in LLM Code Generation through Real-World Risk Scenarios25 Jul 2026
- 2026Tool-Guided Retrieval-Augmented Repair for Securing LLM-Generated C Code21 Jul 2026
- 2026The Aura in the Machine: Genealogy and the Status of the Work of Art in the Generative Era20 Jul 2026
- 2026From Adoption to Deployment: A Qualitative Study on AI Integration in Software Development Practice18 Jul 2026
- 2026Large Language Models for Code Generation from Multilingual Prompts: A Curated Benchmark and a Study on Code Quality16 Jul 2026
12 newest of 138 All 138 (JSON)