Open and completed research requests

LLM-assisted “vibe coding” accelerates software delivery but introduces new attack surfaces beyond traditional secure SDLC risks. This project will build a practical threat model focused on agentic and copilot-style coding workflows, including prompt injection, context poisoning, supply-chain abuse, and secret leakage. We will evaluate mitigation layers spanning prompt hygiene, permissioning, provenance controls, and CI policy gates. The expected impact is a reproducible security playbook and benchmark that organizations can apply to reduce incident likelihood without losing developer productivity.