Research questionHow can artifact evaluation identify security risks in publicly released research artifacts?Reproducibility checks establish whether an artifact works as claimed, but they do not reveal whether publicly shared code creates context-dependent security risks when reused.