ENISA publishes draft version 0.4 of technical advisory on AI-assisted software development

The European Union Agency for Cybersecurity (ENISA) draft 'AI-assisted software development technical advisory' version 0.4 is dated September 2026 and proposes embedding secure-by-design expectations into AI-assisted development workflows for coding assistants and agents. The document outlines components such as models, coding assistants and agents, tool integration (including MCP), and context and project instructions, and organizes adversarial threats under STRIDE—spoofing, tampering, information disclosure, and elevation of privilege—as well as non-adversarial risks such as functionality available but insecure, incomplete context, hallucination dependence, and insufficient review. Its core method has four steps: identify the lifecycle process and security requirements corresponding to the activity; communicate these requirements to the assistant via prompts or reusable skills; verify outputs through review and approval with checks such as SAST and dependency scanning; and record evidence. The annex uses dependency selection as an example, showing how to write package manager security recommendations as SKILL.md skill content, and notes that skills do not guarantee secure outputs and require ongoing maintenance.