--- title: Choose Wisely: AI-Generated Coding Risk Varies, A Lot description: Secure Code Warrior's AI Trust Index, built on 1,760 codebases generated by 16 frontier LLMs, finds AI-generated code averages 15 vulnerabilities per codebase... canonical: https://daily.dev/posts/choose-wisely-ai-generated-coding-risk-varies-a-lot-exjquqduy twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Choose Wisely: AI-Generated Coding Risk Varies, A Lot | daily.dev og:description: Secure Code Warrior's AI Trust Index, built on 1,760 codebases generated by 16 frontier LLMs, finds AI-generated code averages 15 vulnerabilities per codebase... og:url: https://daily.dev/posts/choose-wisely-ai-generated-coding-risk-varies-a-lot-exjquqduy og:image: https://api.daily.dev/og/posts/exJquQdUY.png og:image:alt: Choose Wisely: AI-Generated Coding Risk Varies, A Lot og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Choose Wisely: AI-Generated Coding Risk Varies, A Lot **[Dark Reading](https://daily.dev/sources/dr)** · 5 min read · 0 upvotes · 0 comments ## Summary Secure Code Warrior's AI Trust Index, built on 1,760 codebases generated by 16 frontier LLMs, finds AI-generated code averages 15 vulnerabilities per codebase including 4.3 critical/high severity issues. The key finding is that model-framework pairing matters far more than the model alone — Claude Opus 4.8 scored 100 in Django but only 28.5 in C#-Basic. JavaScript and Java EE/JSP carried the highest risk, while C# and Java Spring showed minimal exposure. The highest-scoring frameworks were 40x less risky than the lowest. Cost had no correlation with security quality. The most common failures were omissions (missing auth checks, input validation) rather than actively dangerous code. CISOs are advised to focus developer training on five high-volume CWEs: sensitive data in logs, XSS, hard-coded credentials, predictable session tokens, and path traversal. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Devs know AI code is riddled with holes, but ship it anyway](https://daily.dev/posts/devs-know-ai-code-is-riddled-with-holes-but-ship-it-anyway-xma56raho) · DEVCLASS · 1 upvotes · 1 comments - [AI-Generated Code in Production: Can It Really Be Trusted?](https://daily.dev/posts/ai-generated-code-in-production-can-it-really-be-trusted--uszaxywbi) · Medium · 1 upvotes · 0 comments - [Enterprises know AI-generated code is vulnerable; they’re shipping it anyway](https://daily.dev/posts/enterprises-know-ai-generated-code-is-vulnerable-they-re-shipping-it-anyway-o7qxd8buy) · InfoWorld · 1 upvotes · 0 comments - [Beyond Benchmarks: Measuring the True Cost of AI-Generated Code](https://daily.dev/posts/beyond-benchmarks-measuring-the-true-cost-of-ai-generated-code-kgcg2mdob) · SD Times · 0 upvotes · 0 comments --- Tags: [#llm](https://daily.dev/tags/llm), [#ai-coding](https://daily.dev/tags/ai-coding), [#appsec](https://daily.dev/tags/appsec) [View this post on daily.dev](https://daily.dev/posts/choose-wisely-ai-generated-coding-risk-varies-a-lot-exjquqduy) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Choose Wisely: AI-Generated Coding Risk Varies, A Lot","url":"https://daily.dev/posts/choose-wisely-ai-generated-coding-risk-varies-a-lot-exjquqduy","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/choose-wisely-ai-generated-coding-risk-varies-a-lot-exjquqduy"},"datePublished":"2026-07-21T13:05:04.465Z","dateModified":"2026-07-21T13:05:31.814Z","description":"Secure Code Warrior's AI Trust Index, built on 1,760 codebases generated by 16 frontier LLMs, finds AI-generated code averages 15 vulnerabilities per codebase...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/3b4a34b588ad6bad6890dc7c6fa501a2?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/3b4a34b588ad6bad6890dc7c6fa501a2?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Dark Reading","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Dark Reading","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/dr","url":"https://daily.dev/sources/dr"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/choose-wisely-ai-generated-coding-risk-varies-a-lot-exjquqduy","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"llm,ai-coding,appsec","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Dark Reading","item":"https://daily.dev/sources/dr"},{"@type":"ListItem","position":3,"name":"Choose Wisely: AI-Generated Coding Risk Varies, A Lot"}]} ```