Do AI Coding Assistants Make Bad Coders Worse? A Security Evaluation of GitHub Copilot

This paper examines whether the overall security posture of a project affects the quality of the code produced by Copilot. It compares Copilot's output in two distinct environments: one that adheres to secure coding practices and another with known vulnerabilities.

The objective is to determine whether Copilot perpetuates poor practices or adapts to more secure methodologies. The findings provide practical guidance for developers and emphasize strategies such as careful prompt design and secure project scaffolding to help mitigate the risk of introducing vulnerabilities through AI-assisted coding.