mlsanityData to 14 Oct 2026

SWE-MISBEHAVIOR: Benchmarking and Mitigating Boundary Violations in Software Coding Agents

arXiv 2610.18206 ↗First posted 13 Oct 2026cs.SE cs.CLcited by 0

On the map: LLM agents and tool use → Software engineering coding agents

Abstract (arXiv)

We present SWE-MISBEHAVIOR, the first taxonomy and evaluation framework for diagnosing boundary-violating misbehaviors in coding agents. It contains 7.4K human-in-the-loop synthesized samples spanning three layers of agent action space: (i) Code Generation, (ii) File Management, and (iii) System Interaction. Across these categories, SWE-MISBEHAVIOR covers 11 distinct misbehaviors with a fully automated evaluation protocol, including coding-action violations, Create/Read/Update/Delete (CRUD) file misbehaviors, system integrity and abuse violations, and task-goal misalignment. Experiments on state-of-the-art open-source coding agents (e.g., OpenHands, smolagents) reveal substantial misaligned behaviors, including dependency misinterpretation (up to 98.5% of cases), unintended modification of user inputs (50.5%), and silent compromise of environment integrity (53%). Motivated by these findings, we further propose CODE-KIT, a lightweight adaptive framework that combines misbehavior-aware guidelines with novel tools to help agents avoid such failures. CODE-KIT reduces misbehaviors by 52% for smolagents and 34% for OpenHands, while simultaneously improving task completion performance.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Software engineering coding agents, one of 16 directions in LLM agents and tool use. Builds on 37 of its 79 references that are in the map. First posted on arXiv 13 Oct 2026.

Builds on

37 of 79 references.

Closest ancestors · 15

Same direction, newest first

  1. 2026Safer Builders, Risky Maintainers: A Comparative Study of Breaking Changes in Human vs Agentic PRs29 Mar
  2. 2026SlopCodeBench: Benchmarking How Coding Agents Degrade Over Long-Horizon Iterative Tasks25 Mar
  3. 2026SWE-CI: Evaluating Agent Capabilities in Maintaining Codebases via Continuous Integration4 Mar
  4. 2026Evaluating and Improving Automated Repository-Level Rust Issue Resolution with LLM-based Agents26 Feb
  5. 2026What to Cut? Predicting Unnecessary Methods in Agentic Code Generation19 Feb
  6. 2026Wink: Recovering from Misbehaviors in Coding Agents19 Feb
  7. 2026SWE-AGI: Benchmarking Specification-Driven Software Construction with MoonBit in the Era of Autonomous Agents10 Feb
  8. 2026ProjDevBench: Benchmarking AI Coding Agents on End-to-End Project Development2 Feb
  9. 2026Where Do AI Coding Agents Fail? An Empirical Study of Failed Agentic Pull Requests in GitHub21 Jan
  10. 2025Understanding Code Agent Behaviour: An Empirical Study of Success and Failure Trajectories31 Oct
  11. 2025Understanding Software Engineering Agents: A Study of Thought-Action-Result Trajectories23 Jun
  12. 2025TRAIL: Trace Reasoning and Agentic Issue Localization13 May
3 more
  1. 2025SWE-PolyBench: A multi-language benchmark for repository level evaluation of coding agents11 Apr
  2. 2024Evaluating Software Development Agents: Patch Patterns, Code Quality, and Issue Complexity in Real-World GitHub Scenarios16 Oct
  3. 2024OpenHands: An Open Platform for AI Software Developers as Generalist Agents23 Jul

Other references · 22

  1. 2021Program Synthesis with Large Language Modelscited by 3,637
  2. 2023SWE-bench: Can Language Models Resolve Real-World GitHub Issues?cited by 3,373
  3. 2024BigCodeBench: Benchmarking Code Generation with Diverse Function Calls and Complex Instructionscited by 546
  4. 2023NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Railscited by 365
  5. 2023CrossCodeEval: A Diverse and Multilingual Benchmark for Cross-File Code Completioncited by 183
  6. 2025Multi-SWE-bench: A Multilingual Benchmark for Issue Resolvingcited by 171
  7. 2025Progent: Securing AI Agents with Privilege Controlcited by 141
  8. 2024GuardAgent: Safeguard LLM Agents by a Guard Agent via Knowledge-Enabled Reasoningcited by 124
  9. 2024The Task Shield: Enforcing Task Alignment to Defend Against Indirect Prompt Injection in LLM Agentscited by 99
  10. 2024RedCode: Risky Code Execution and Generation Benchmark for Code Agentscited by 90
  11. 2025AGrail: A Lifelong Agent Guardrail with Effective and Adaptive Safety Detectioncited by 89
  12. 2024EvoCodeBench: An Evolving Code Generation Benchmark Aligned with Real-World Code Repositoriescited by 72
10 more
  1. 2026ToolSafe: Enhancing Tool Invocation Safety of LLM-based agents via Proactive Step-level Guardrail and Feedbackcited by 72
  2. 2023xCodeEval: A Large Scale Multilingual Multitask Benchmark for Code Understanding, Generation, Translation and Retrievalcited by 47
  3. 2025Enforcing Temporal Constraints for LLM Agentscited by 34
  4. 2025Is Vibe Coding Safe? Benchmarking Vulnerability of Agent-Generated Code in Real-World Taskscited by 22
  5. 2025In-Context Defense in Computer Agents: An Empirical Studycited by 10
  6. 2025When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agentscited by 8
  7. 2025What Makes a Good Natural Language Prompt?cited by 7
  8. 2026IDE-Bench: Evaluating Large Language Models as IDE Agents on Real-World Software Engineering Taskscited by 4
  9. 2026When Models Edit Too Much: On the Fidelity of Minimal Code Editscited by 3
  10. 2026Retrieved But Not Reliable: A Survey on Attacks, and Defenses in Retrieval-Augmented Generationcited by 1

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026SWE-Touch: Benchmarking Coding Agents When Users Touch the Code
  2. 2026How Coding Agents Fail Their Users: A Large-Scale Analysis of Developer-Agent Misalignment in 20,574 Real-World Sessions
  3. 2026SWE Refactor Bench: Can Coding Agents Complete a Long-Horizon, Whole-Repository Stack Migration?
  4. 2026SWE-INTERACT: Reimagining SWE Benchmarks as User-Driven Long-Horizon Coding Sessions
  5. 2026Coding Agents Are Guessing: Measuring Action-Boundary Violations in Underspecified DevOps Instructions
  6. 2026ProgramDistill: From Interactive Web Apps to Verifiable Reference-Guided SWE Tasks
  7. 2026ParanoiaEval: Benchmarking Unnecessary Defensive Work in Agentic Coding
  8. 2026Active-SWE: Benchmarking Coding Agents for Proactive Bug Fixing without Issue Reports