Kaixuan Li enhanced static analysis and security tooling across the codeql and curl repositories during March 2026. Focusing on C++, Java, and C, Kaixuan improved format string vulnerability detection by refining data-flow analysis and updating printf-like handling for better maintainability. In Java, Kaixuan expanded the secure algorithm whitelist and refined tainted-arithmetic queries to reduce false positives, leveraging cryptography modeling and test automation. For curl, Kaixuan addressed memory allocation mismatches and strengthened SOCKS5 hostname validation, improving tool reliability. The work demonstrated depth in code quality, security analysis, and documentation governance, resulting in safer deployments and more efficient vulnerability triage.