{"data":{"id":"6741a751-d93d-4055-a36e-0b128f198d5a","title":"RiskyPy: Toward Model-Calibrated Prompt Generation for Joint Security and Functionality Evaluation of LLM-Generated Code","summary":"RiskyPy is an automated pipeline that generates security-oriented Python code-generation prompts calibrated to model proficiency, using functionality and vulnerability canaries. It covers 18 CWEs from the 2025 CWE Top 25 and produces 101 prompts. In experiments on Qwen3-4B and Seed-Coder-8B, 57-72% of prompts yielded functional code, while only 5-10% of generations were free of Bandit findings.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://arxiv.org/abs/2610.40735v1","publishedAt":"2026-10-29T14:03:12.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":[],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Qwen3-4B","Seed-Coder-8B"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-29T14:03:12.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":null,"aiComponentTargeted":"model","llmSpecific":true,"classifierConfidence":0.92,"researchCategory":"preprint","atlasIds":null}}