AI coding agents can make development faster. But what happens when they start downloading, installing and running code that nobody has verified? The convenience is enormous, but so is the potential attack surface. AI agents need the same security discipline we expect from any