Evaluating and Preventing Security Smells in AI-Generated Ansible Code
Source
arxiv.org
Author
Pandu Ranga Reddy Konala, Vimal Kumar, David Bainbridge, Junaid Haseeb
Date
Why it matters
Ungated AI-generated Ansible ships CIS-noncompliant infrastructure from every model tested; folding CIS benchmarks and Ansible practice into the prompt gets the best model to 95-100% compliance, prevention at synthesis rather than detection after deploy.