AI coding assistant

Limitations

According to a report from the German Federal Office for Information Security, the use of AI coding assistants without careful oversight from experienced developers can introduce major security vulnerabilities or generate incorrect solutions (about 50% of the time), and any potential gain in productivity should be weighed against the cost of additional quality control and security measures. The report also states that a programmer relying too much on AI coding assistants runs the risk of losing the skill to review and evaluate source code. The report further states that AI coding assistants create novel vectors for cyberattack as well as a potential for exfiltration of confidential data for model training by the providers of AI coding assistants. According to Deloitte, outputs from AI-assisted software development must be validated through a combination of automated testing, static analysis tools, and human review, creating a governance layer to improve quality and accountability.