Conference
OWASP AppSec Days Bangalore 2025
October 18, 2025
Abstract
AI coding assistants are changing how we write software, but they’re also creating a new, subtle blind spot in our software supply chain. We look at the risks, ways forward, and introduce Vibe Scanner (MCP to detect supply chain issues).
Key Topics Covered
- AI-Assisted Development Risks - Understanding the security implications of AI coding tools
- Supply Chain Vulnerabilities - How AI tools can introduce new attack vectors
- Detection Strategies - Proactive identification of AI-related security issues
- Vibe Scanner - MCP (Model Context Protocol) tool for supply chain security
- Best Practices - Securing AI-assisted development workflows
Impact
This talk addresses the emerging security challenges in AI-assisted development, providing practical solutions for organizations adopting AI coding tools while maintaining security standards.
Related Work
- ActionsGuardHub - AI-powered security scanning
- Supply Chain Security - Comprehensive protection strategies
- Vibe Scanner - MCP tool for detecting supply chain issues