Topic starter
02/08/2026 11:24 am
TL;DR: AI-assisted coding moves package selection and installation into a workflow where humans may never review the code, while attackers are already poisoning popular dependencies and exploiting slopsquatting, according to Aikido. The governance problem is no longer developer speed but where trust is checked before unreviewed code reaches production.
Editorial analysis by NHI Mgmt Group, based on content published by Aikido: “Everybody's shipping code they can't read”.
Key questions
Q: What breaks when AI-generated package names are allowed to install without review?
A: The main failure is that model output becomes an execution path.
Q: Why do AI-generated package choices create more supply chain risk than normal developer workflows?
A: Because the agent can move from intent to execution without the human judgment step that usually filters suspicious packages.
Q: How do you know if package security controls are actually working?
A: Look for fewer unexpected publishes reaching build systems, lower rates of install-time outbound connections, and measurable reductions in secret exposure during pipeline execution.
Practitioner guidance
- Enforce dependency allowlisting for agent-generated code Treat packages selected by AI coding tools as untrusted until they pass a controlled admission policy.
- Disable automatic install-script execution by default Require explicit approval before any package install hook runs, because the malicious payload often appears at install time rather than in source code.
- Separate sandbox output from production promotion Do not treat a successful sandbox run as a trust decision.
Bottom line: AI-written code shifts software trust away from human code review and toward package admission controls.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
02/08/2026 12:41 pm
AI-assisted coding has turned package selection into a delegated trust decision. The security issue is no longer whether developers can read every diff, because in many workflows they never see the dependency choice at all. That makes package admission a governance control, not a developer preference, and it should be treated with the same seriousness as privileged access.
A question worth separating out:
Q: Should organisations trust sandboxed AI coding workflows?
A: Only as a containment layer, not as a trust decision. Sandboxes can limit immediate blast radius, but they do not remove the risk that the same dependency choices, scripts, or artefacts will later be promoted into real repositories with real credentials. The safer approach is to validate dependencies and package provenance before promotion, not just after execution.
👉 Read our full editorial: Everybody's shipping code they can't read, and that changes trust