Papers with informed library selection
LibVulnWatch: A Deep Assessment Agent System and Leaderboard for Uncovering Hidden Vulnerabilities in Open-Source AI Libraries (2025.acl-srw)
Copied to clipboard
Zekun Wu, Seonglae Cho, Umar Mohammed, Cristian Enrique Munoz Villalobos, Kleyton Da Costa, Xin Guan, Theo King, Ze Wang, Emre Kazim, Adriano Koshiyama
| Challenge: | Open-source AI libraries present significant, underexamined risks spanning security, licensing, maintenance, supply chain integrity, and regulatory compliance. |
| Approach: | They propose a system that leverages large language models and agentic workflows to perform deep, evidence-based evaluations of open-source AI libraries. |
| Outcome: | The proposed system covers up to 88% of OpenSSF Scorecard checks and uncovers 19 additional risks per library. |