Researchers have developed RiskyPy, a new automated pipeline designed to create datasets for evaluating the security and functionality of code generated by large language models (LLMs). This system generates prompts calibrated to specific model capabilities, addressing the cost and calibration issues of existing benchmarks. Initial experiments using Python and 18 Common Weakness Enumerations (CWEs) from the 2025 CWE Top 25 demonstrated that the generated tasks are functionally accessible, with a significant portion yielding functional code while still containing vulnerabilities, thus enabling joint evaluation of security and functionality improvements. AI
IMPACT Enables more robust evaluation of LLM-generated code security and functionality.
RANK_REASON The cluster describes a research paper detailing a new methodology for dataset generation. [lever_c_demoted from research: ic=1 ai=1.0]
AI-generated summary · Google Gemini · from 1 sources. How we write summaries →