# What nearly 10,000 developer environments reveal about agentic development risk

DevFeed: [What nearly 10,000 developer environments reveal about agentic development risk](<https://devfeed.tech/articles/what-nearly-10-000-developer-environments-reveal-about-agentic-development-risk-7798.md>)

Original publisher: [Read original article](<https://snyk.io/blog/agentic-development-security-ai-coding-risk/>)

Author: Ricardo Miguel Silva

Published: 2026-06-23T04:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [AI-assisted coding](<https://devfeed.tech/topics/ai-assisted-coding.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Application Security](<https://devfeed.tech/topics/application-security.md>), [Model Context Protocol](<https://devfeed.tech/topics/model-context-protocol.md>), [Agent Skills](<https://devfeed.tech/topics/agent-skills.md>), [prompt injection](<https://devfeed.tech/topics/prompt-injection.md>), [Security](<https://devfeed.tech/topics/security.md>), [software-development](<https://devfeed.tech/topics/software-development.md>), [Tooling](<https://devfeed.tech/topics/tooling.md>)

Tags: [agentic](<https://devfeed.tech/tags/agentic.md>), [agents](<https://devfeed.tech/tags/agents.md>), [ai](<https://devfeed.tech/tags/ai.md>), [ai-coding](<https://devfeed.tech/tags/ai-coding.md>), [application-security](<https://devfeed.tech/tags/application-security.md>), [article](<https://devfeed.tech/tags/article.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [claude](<https://devfeed.tech/tags/claude.md>), [code](<https://devfeed.tech/tags/code.md>), [cursor](<https://devfeed.tech/tags/cursor.md>), [developer](<https://devfeed.tech/tags/developer.md>), [developers](<https://devfeed.tech/tags/developers.md>), [development](<https://devfeed.tech/tags/development.md>), [devops](<https://devfeed.tech/tags/devops.md>), [devsecops](<https://devfeed.tech/tags/devsecops.md>), [enablement](<https://devfeed.tech/tags/enablement.md>), [interest](<https://devfeed.tech/tags/interest.md>), [prompt-injection](<https://devfeed.tech/tags/prompt-injection.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [security](<https://devfeed.tech/tags/security.md>), [security-labs](<https://devfeed.tech/tags/security-labs.md>), [skills](<https://devfeed.tech/tags/skills.md>), [snyk-code](<https://devfeed.tech/tags/snyk-code.md>), [snyk-platform](<https://devfeed.tech/tags/snyk-platform.md>), [snyk-security-intel](<https://devfeed.tech/tags/snyk-security-intel.md>), [software-development](<https://devfeed.tech/tags/software-development.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>), [supply-chain-security](<https://devfeed.tech/tags/supply-chain-security.md>), [systems](<https://devfeed.tech/tags/systems.md>), [tool](<https://devfeed.tech/tags/tool.md>), [tooling](<https://devfeed.tech/tags/tooling.md>), [tools](<https://devfeed.tech/tags/tools.md>), [vs-code](<https://devfeed.tech/tags/vs-code.md>)

## AI overview

Snyk analyzed nearly 10,000 developer environments and found that agentic development is introducing a new software supply chain layer. The article reports widespread use of multiple AI coding environments, MCP servers, and agent skills, along with confirmed prompt injection findings and security exposure that AppSec teams need to govern.

## Source excerpt

AI coding agents are adding a new layer to the software supply chain. Learn what Snyk found in nearly 10,000 developer environments and how to secure the tools, instructions, and permissions behind agentic development.