What nearly 10,000 developer environments reveal about agentic development risk

AI coding tool sprawl is common: 43% of developers run two or more AI coding environments. AI coding tool sprawl is common: 43% of developers run two or more AI coding environments. MCP adoption is already widespread: 50.8% of developers have at least one MCP server installed. MCP adoption is already widespread: 50.8% of developers have at least one MCP server installed. MCP risk is showing up now: 1 in 7 developers with MCP servers had at least one security finding. MCP risk is showing up now: 1 in 7 developers with MCP servers had at least one security finding. Agent skills add another risk layer: 22.8% of developers had at least one skill installed. Agent skills add another risk layer: 22.8% of developers had at least one skill installed. Prompt injection is present in active tooling: Snyk found 392 confirmed prompt injection findings in tool descriptions. Prompt injection is present in active tooling: Snyk found 392 confirmed prompt injection findings in tool descriptions. For years, application security teams have focused…