AI agents can write insecure code but refuse to fix vulnerabilities
cantrell · x · 2026-08-20
A developer observed a paradox: AI agents are currently allowed to write insecure code, but when attempting to find and fix those vulnerabilities during the security review phase, they frequently face refusals. The author suspects GPT has become more prone to refusals in security review contexts recently.
Related event: GPT's tightened safety reviews stall tasks, developers switch models(4 posts)→
More from coding & agent
- Inflight launches: a feedback layer that turns prototype comments into Claude tasks — soleio · 2026-10-16
- Apple code signing drags for hours; official advice: just wait a week — pjausovec · 2026-10-16
- Hermes: a 4B model with 8K context got worse with more test-time compute, pointing to contextual reasoning — mangahomanga · 2026-10-16
- Flux 3 Klein's Default Templates Are Broken Without Its Prompt Upscaler — StrictMove5839 · 2026-10-16
- 21-person team ships hundreds of PRs weekly with AI writing 97% of the code — rseroter · 2026-10-16
- ClosedMCP: Set Up MCP Servers Once, Share Them Across Your Whole Team — Ok_Sprinkles1301 · 2026-10-16