A coding agent can open a pull request in minutes. The reviewer still has to decide whether the change solves the right problem, whether it is safe to operate and who will maintain it. A clean diff and a green test run help, but neither answers all three questions. Consider a request to add a retry to a payment client. The agent may produce tidy code, add a unit test and describe the change accurately.

Security gates at the end of a sprint kill velocity. A coding agent can cut feature work time in half, but security teams that don’t understand what the agent does will block it. The agent reads code from your repo, issues from your tracker, snippets from web pages, and it writes back pull requests. One malicious instruction planted in that text can make the agent send a deploy token somewhere it shouldn’t.