Severity: MediumAdvisoryGovernance
Unmanaged IDE AI extensions create a shadow-AI footprint
Global
Sample data. Showing illustrative sample items as a fallback — the live feed is not available right now.
An internal audit found dozens of unsanctioned AI coding extensions with broad filesystem and network permissions running on developer machines. Most were installed outside any approval process and had never been inventoried.
What to do
Continuously discover AI agents and extensions across endpoints, bring them under an approval workflow, and revoke permissions that exceed the role's needs.
Mapped framework pillars
Sources
#shadow AI#IDE extensions#inventory