TY - RPRT TI - Beyond the Payload: How User Invocation Shapes Coding Agent Vulnerability to Repository Poisoning AU - Fukang Zhu AU - Binbin Zhao AU - Ruixiao Lin AU - Ping He AU - Tianyu Du AU - Shouling Ji PY - 2026 UR - https://arxiv.org/abs/2608.30686 ID - 2608.30686 ER -