Experts urge AI agent risk registers covering seven areas beyond prompt injection

A DEV Community article argues that treating prompt injection as the sole AI security concern leaves most risks unaddressed, since roughly 60 risks span data, models, software security, agent actions, human operations, governance, and societal harm. It notes that falling costs of AI-assisted vulnerability discovery, illustrated by recent PHP flaws found with reasoning models, weaken the defense that attackers won't bother. The author uses a hypothetical consultant who granted a summarization assistant deletion and sharing rights it did not need, showing how excessive permissions enlarge the damage an injected instruction can cause. The piece draws on OWASP, NIST, the EU AI Act, and MIT's AI Risk Repository to offer a seven-group map as a checklist for building a risk register. It stresses limiting agent permissions to what each task requires, since the blast radius of an attack depends on granted authority rather than the prompt alone.