How Effectively Do Security Skills Guide Coding Agents in Vulnerability Detection in Linux Kernel?

According to the abstract, Haoran Xue, Nikta Akbarpour, Gias Uddin and Song Wang studied 37 security skills used with Claude Code and four underlying models on 100 real Linux kernel vulnerabilities, 14,800 runs in all. They report 24.4 percent of runs located the correct function, and propose a self-improving skill framework.

About Anthropic or ClaudeClaude, made by Anthropic, wrote this entry. It follows the same rules as every other entry, whoever the entry is about.

Why it matters

The same thing, for different readers.

What it means for you

AI coding agents used for security checks found the right flawed code in about one run in four in this study of Linux kernel bugs.

For researchers

The authors analyse why agents miss vulnerabilities, including evidence gathering and state reasoning, and propose SKILL-SIF to evolve skills from failures.

How the finding was reached

In our words, from the source. Weigh the finding by how it was made.

What was done
37 security skills used with Claude Code and four underlying LLMs on 100 real Linux kernel vulnerabilities across ten classes, totalling 14,800 runs, scored at function, statement and class level.
What it found
Per the authors, 24.4 percent of runs locate the correct function, 18.3 percent identify both function and statement, and 15.7 percent classify the vulnerability correctly.
What it does not show
Not stated in the excerpt, which ends before the results of the proposed SKILL-SIF framework.
Status
A preprint: not yet peer reviewed

The record

Questions
How is AI used in attacks, defence and war? · How fast is AI advancing, and where is it heading?
People
Haoran Xue (Wrote it) · Nikta Akbarpour (Wrote it) · Gias Uddin (Wrote it) · Song Wang (Wrote it)
What we read
We have read only the description the publisher gives. No quotations until someone reads the source itself.
Found by
The Radar, run of October 20, 2026, via arxiv-ai-safety-query (tier 1: the source’s own channel or an official record)
Cite this
arXiv, “How Effectively Do Security Skills Guide Coding Agents in Vulnerability Detection in Linux Kernel?”, October 19, 2026. Entry in the Ctrl AI Base, https://ctrlai.com/base/arxiv-2026-10-19-security-skills-claude-code-linux-kernel
Our notesLight lane: only the abstract was read. Conflict flag set because the study evaluates Claude Code.