Do Xuan Trong

National University of Singapore; Vietnam National University, Hanoi

Titles as the sources gave them. In 1 entry, with 5 checked quotations.

What they said

Newest first. Each quotation was found word for word in the source.

“Experiments on state-of-the-art open-source coding agents (e.g., OpenHands, smolagents) reveal substantial misaligned behaviors, including dependency misinterpretation (up to 98.5% of cases), unintended modification of user inputs (50.5%), and silent compromise of environment integrity (53%).”
SWE-MISBEHAVIOR: Benchmarking and Mitigating Boundary Violations in Software Coding AgentsarXiv, October 13, 2026. Speaking as: Other. Abstract: headline results. 'Dependency misinterpretation' is the File Read check, which flags both missing required files and reading beyond a set list.
“The same models behave very differently depending on the agent framework, which shows that the tool interface plays a key role.”
SWE-MISBEHAVIOR: Benchmarking and Mitigating Boundary Violations in Software Coding AgentsarXiv, October 13, 2026. Speaking as: Other. Section 4.3, Finding 3: three models were each run in OpenHands, smolagents and Agno, and misbehavior rates differed sharply by framework.
“This verifies that prompting alone changes the agent’s awareness but not its affordances; because agents still rely on overly broad general-purpose tools, misbehaviors like Context and Body Change actually worsen in OpenHands.”
SWE-MISBEHAVIOR: Benchmarking and Mitigating Boundary Violations in Software Coding AgentsarXiv, October 13, 2026. Speaking as: Other. Section 5: the authors first added hand-written 'permission rules' to the agent's prompt; results were inconsistent, which led them to add purpose-built tools.
“Motivated by these findings, we further propose Code-KIT, a lightweight adaptive framework that combines misbehavior-aware guidelines with novel tools to help agents avoid such failures. Code-KIT reduces misbehaviors by 52% for smolagents and 32% for OpenHands, while simultaneously improving task completion performance.”
SWE-MISBEHAVIOR: Benchmarking and Mitigating Boundary Violations in Software Coding AgentsarXiv, October 13, 2026. Speaking as: Other. Abstract: the authors' mitigation; the 52% and 32% cuts are average rates for smolagents and OpenHands running Gemini-2.5-Flash.
“Although SWE-Misbehavior makes solid progress in studying misbehaviors of coding agents, it does not cover the full spectrum of failures that may arise in agentic environments, such as multi-turn security vulnerability injection or complex unauthorized data exfiltration.”
SWE-MISBEHAVIOR: Benchmarking and Mitigating Boundary Violations in Software Coding AgentsarXiv, October 13, 2026. Speaking as: Other. Limitations section: what the benchmark does not cover.

In the Base

Every entry they appear in.

  1. ResearcharXivWrote it

    SWE-MISBEHAVIOR: Benchmarking and Mitigating Boundary Violations in Software Coding Agents

    Researchers at the National University of Singapore and partner institutions introduce SWE-Misbehavior, a 7.4K-case benchmark of coding agents acting outside their task. Testing four agent frameworks, they report violation rates up to 98.5% on one check, and a tool-restriction method, Code-KIT, that cut average violations by 52% for one agent and 32% for another.