that assumes
- the user does have access to a production db;
- the agent has access to a terminal from which they can reach the production machine (not in a container, different network, or similar);
- access does not require interaction (like entering password);
- the agent deliberately decides to access a production database to solve a development problem, and that was not the user requesting it;
- the agent manages to find the database credentials in production;
- the agent is left unattended.
Possible? Sure. It's also possible that I drink half a bottle of vodka on a Friday night and mess up with production.