
Snyk's Manoj Nair: Skills and MCP Are the New npm
Skills and MCP servers are the new npm, and AI coding agents are pulling them into enterprise codebases faster than security can keep up. Manoj Nair, Chief Innovation Officer at Snyk, joins Guy Podjarny at the Snyk AI Security Summit to map where enterprise agentic coding really stands. They get into why a 50,000-agent Claude Code rollout was pulled forward by weeks, why the autonomous attacker has some CISOs ready to accept an outage to patch faster, and how security is moving into the agent loop of the software factory. What we cover: – Why leadership and culture, not tooling, decide how fast enterprises adopt AI coding agents – The three risks of agentic coding: insecure output, the skills and MCP server supply chain, and agent behavior – Running coding agents locked down: sandboxes, agent identities and no open internet – Who owns the code an agent writes, and why AI-native organizations treat it as shared risk – Securing the software factory: security context in the agent loop and agentic remediation of the backlog – What still has to be solved before enterprises trust agents: identity, intent and behavior Chapters: 00:00:00 - Introduction 00:01:50 - The state of enterprise AI and agent adoption 00:09:45 - Leadership, culture and a 50,000-agent rollout 00:11:18 - Agentic coding risks: output, supply chain, behavior 00:14:29 - Locked-down coding agents and the security trade-off 00:18:01 - Who owns agent output? Compliance and accountability 00:22:54 - The autonomous attacker and security technical debt 00:27:56 - Securing the product vs securing the software factory 00:33:00 - Agentic remediation and the security backlog 00:40:18 - What enterprises need to trust AI coding agents Build your software factory, one workflow at a time, with Tessl: https://tessl.co/jw0 🔔 Subscribe for weekly episodes on AI-native development Where is your organization on the path from copilot to AI coding agents? Tell us in the comments.
- Transcript


















