Analyzing the impact of prompt engineering on efficiency, code quality, and security in CRUD application development
This research evaluates the capabilities of Large Language Models (LLMs) in generating CRUD applications using Python Flask framework, focusing on code quality, security, and UI design. The study analyzes five prominent LLMs: Claude 3.5 Sonnet, Gemini, GitHub Copilot, GPT-4, and Perplexity, through automated static code review tools including Code Factor, Codacy, and Code Scene. The evaluation reveals consistently high performance across models, with GitHub Copilot and Gemini achieving superior code health metrics (9.5-10.0) and 100% green code ratings. While all models maintained Grade A ratings in Code Factor, common security vulnerabilities, particularly in Flask debug mode configuration, persisted across implementations. UI evaluation through professional interviews indicated that while generated interfaces were functionally complete, they lagged behind human-designed UIs in aesthetic appeal. The research demonstrates that LLMs can automate 60-90% of CRUD development tasks, though human intervention remains essential for environment setup and security configuration. The findings suggest a shift toward human-AI hybrid development approaches, where entry-level developers can effectively manage LLM-generated code while focusing on strategic implementation decisions.
Authors
- Kaneeka Vidanage (ORCID: https://orcid.org/0000-0002-1923-9084)
- Janaka Wijayanayake (ORCID: https://orcid.org/0000-0002-9523-5384)
- K. A. Ashen Shanuka
Institutions
- University of Kelaniya (LK)
- General Sir John Kotelawala Defence University (LK)
Publication Details
- Published
- 2025-02-19
- DOI
- https://doi.org/10.1109/icarc64760.2025.10963005
- Primary Topic
- Software Testing and Debugging Techniques
- Type
- article
- Field-Weighted Citation Impact
- 0.00