{"id":"W4406602186","doi":"10.1145/3610721","title":"Asleep at the Keyboard? Assessing the Security of GitHub Copilot’s Code Contributions","year":2025,"lang":"en","type":"article","venue":"Communications of the ACM","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":65,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Calgary","funders":"Office of Naval Research; New York University Abu Dhabi; National Science Foundation","keywords":"Computer science; Code (set theory); Computer security; Programming language","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["open_science"],"consensus_categories":["open_science"],"category_scores_codex":[0.0007618359,0.0000927309,0.0001526822,0.00005500808,0.001096975,0.00005805471,0.03076844,0.00005061624,0.00000417345],"category_scores_gemma":[0.006645087,0.00005209988,0.0001260244,0.0008547133,0.000825279,0.0002244253,0.02958794,0.0003237728,0.00000323649],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001197059,"about_ca_system_score_gemma":0.0001230578,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00006969798,"about_ca_topic_score_gemma":0.0001781773,"domain_scores_codex":[0.9987116,0.0004860339,0.0003443584,0.0001459648,0.0001800478,0.000132026],"domain_scores_gemma":[0.9680501,0.001804336,0.0003482907,0.02936424,0.0004165444,0.00001644185],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"theoretical_or_conceptual","study_design_scores_codex":[0.00001319842,0.0004006902,0.002684198,0.00005217974,0.0002113978,1.612152e-7,0.002051222,0.000467903,0.02220258,0.8578174,0.1018949,0.01220422],"study_design_scores_gemma":[0.0002643095,0.00002549968,0.007338522,0.0001423657,0.0000589449,0.000007096756,0.000232805,0.005885865,0.235522,0.6544032,0.09599444,0.0001249447],"study_design_candidate":"theoretical_or_conceptual","study_design_consensus":"theoretical_or_conceptual","genre_codex":"commentary","genre_gemma":"empirical","genre_scores_codex":[0.01344321,0.005219992,0.4673218,0.498265,0.0005589841,0.001455766,0.0001359211,0.0004775346,0.01312178],"genre_scores_gemma":[0.951531,0.0002429393,0.04734415,0.0005342457,0.000006425367,0.00008701708,0.000002980339,0.000005022493,0.0002462557],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.9380878,"threshold_uncertainty_score":0.9782606,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02508575404232899,"score_gpt":0.3632643177526665,"score_spread":0.3381785637103375,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}