SecureVibe: Making Vibe Coding More Secure

arXiv:2609.38606 · cs.CR, cs.CL · Submitted 2026-09-29 · Read on arXiv

cs.CR, cs.CL

Submitted: 2026-09-29

Updated: 2026-09-29

Code: https://github.com/THUDM/slime

Terminology

• Benchmark — 41× in this paper · explained in 2 episodes
• Reinforcement Learning — 11× in this paper · explained in 4 episodes
• Distillation — 9× in this paper · explained in 2 episodes
• Fine-Tuning — 6× in this paper · explained in 5 episodes
• GRPO — 6× in this paper · explained in 6 episodes
• Alignment — 4× in this paper · explained in 1 episode
• Benchmarking — 4× in this paper · explained in 3 episodes
• Generalization — 4× in this paper · explained in 13 episodes
• Generative AI — 4× in this paper · explained in 2 episodes
• Self-Distillation — 4× in this paper · explained in 7 episodes
• On-Policy Distillation — 2× in this paper · explained in 3 episodes
• Online Reinforcement Learning — 2× in this paper · explained in 2 episodes
• Accuracy — 1× in this paper · explained in 1 episode
• Adam — 1× in this paper · explained in 2 episodes
• Agent Harness — 1× in this paper · explained in 2 episodes
• Agent Interactions — 1× in this paper · explained in 1 episode
• Consistency — 1× in this paper · explained in 3 episodes
• Deep Reinforcement Learning — 1× in this paper · explained in 2 episodes
• Instruction Tuning — 1× in this paper · explained in 2 episodes
• Large Language Model (LLM) — 1× in this paper · explained in 3 episodes
• Scaffolding — 1× in this paper · explained in 3 episodes
• Selection Bias — 1× in this paper · explained in 4 episodes
• Test-time Scaling — 1× in this paper · explained in 2 episodes
• Verification — 1× in this paper · explained in 2 episodes
• Verifier — 1× in this paper · explained in 2 episodes

Sources

• SWE-chat: Coding Agent Interactions From Real Users in the Wild
• SecureVibeBench: Benchmarking Secure Vibe Coding of AI Agents via Reconstructing Vulnerability-Introducing Scenarios
• Trae Agent: An LLM-based Agent for Software Engineering with Test-time Scaling
• FrogNano: Training a 4B Coding Agent via Online Task Synthesis
• MetaSpatial: Reinforcing 3D Spatial Reasoning in VLMs for the Metaverse
• Lingma SWE-GPT: An Open Development-Process-Centric Language Model for Automated Software Improvement
• Learning to Generate Secure Code via Token-Level Rewards
• DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Models
• A Survey of On-Policy Distillation for Large Language Models
• GoodVibe: Security-by-Vibe for LLM-Based Code Generation
• BaxBench: Can LLMs Generate Correct and Secure Backends?
• PATCHEVAL: A New Benchmark for Evaluating LLMs on Patching Real-World Vulnerabilities
• Secure Code Generation via Online Reinforcement Learning with Vulnerability Reward Model
• SeCodePLT: A Unified Platform for Evaluating the Security of Code GenAI
• Coding with "Enemy": Can Human Developers Detect AI Agent Sabotage?
• Group Sequence Policy Optimization

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills
• Token Composition: A Graph Based on EVM Logs