Vibecoding
p/vibecodingBuild for the vibe, debug later
trending
•

7mo ago

How are you dealing with vibe coding security risks in AI-generated code?

I ve been using a lot of AI-generated code lately, and while it definitely speeds things up, security feels like a weak spot.

I ve run into issues like missing auth, exposed endpoints, and weak configs stuff that AI doesn t really flag unless you explicitly ask.

Curious how others are handling this:

  • Do you rely more on manual reviews or tools?

  • Any workflows that consistently catch vulnerabilities?

  • Have you faced any real incidents because of AI-generated code?

What part of AI-assisted software development still feels surprisingly manual?

I've been building with tools like Claude Code, Cursor, and Replit, and they've dramatically sped up coding.

But I've noticed there are still parts of the workflow that feel surprisingly manual.

For example:

  • Finding a prompt that worked a few weeks ago.

  • Remembering how a specific feature was generated.

  • Keeping architecture and AI context organized across different tools.

  • Iterating on AI-generated code without starting over.

•

11d ago

How do you catch AI-written tests that always pass no matter what?

I've caught AI coding assistants writing tests a few times that looked completely legit at first glance but were actually asserting nothing useful. One test was just checking if a mock function was called instead of verifying the actual output data. Now I've made it a habit to temporarily undo the code fix just to see if the test actually fails. If it stays green the test is just giving a false sense of security. Do you manually audit your automated test suites or do you mostly trust what the generator outputs?

•

11d ago

I built synthetic survey respondents — the hard part was stopping the model from faking consensus

Idea: condition an LLM on real census data, have it answer a question as ~400 weighted "people," aggregate like a poll.

Getting a plausible distribution was easy. Getting an honest one wasn't on stereotype-magnet questions the model collapses to ~100% one answer. That's its prior wearing a lab coat, not opinion.

•

2mo ago

At what point does running more agents backfire?

I keep seeing tools talk about how many agents they can run in parallel or how much of the backlog they can take on.

But every additional agent also creates more work to review, more decisions to make and more places where something can quietly go wrong.

•

3mo ago

🚀 The fastest way to tell if you're vibe coding... or actually building a product

A few months ago, I realized I was measuring the wrong thing.

Every day I'd look at questions like:

•

1yr ago

I build my first full social app with vibecoding.

I'm a UX designer by trade, and as a designer I always had some fun ideas to build but never the tools to do so other then some concept design. But recently I had this Idea again from a while back and just build it.

It ook me over 2 months and had to learn a lot of code and documentation myself to tell the damn AI's what to do.

It's a weird feeling of feeling powerful and helpless at the same time haha.

•

3mo ago

The real debt in vibecoding isn't in your code, it's in your prompts, and it compounds faster

Noticed something a few weeks into a bigger project. Early on, a prompt like "add a delete button" just worked, one sentence, done. Now the same size request needs four sentences of context just to not break something else, which auth flow to respect, which of the two similar-looking components to touch, which past decision not to accidentally undo.

That's not classic technical debt. The code itself might be totally fine. The debt is that every prompt now has to carry more context just to stay correct, and that context requirement grows quietly, prompt by prompt, without ever showing up as a line in the codebase you'd notice.

The trap is it feels like the project getting more complex, which is normal and expected. But it's actually something narrower: the AI's working memory of your decisions is shrinking relative to how many decisions exist, so you're the one who has to keep re-supplying context it should already "know." At some point you're basically writing documentation into every prompt just to get back to where a one-line request used to work.

The only thing that's slowed this down for me: treating repeated context as a signal, not a nuisance. If I'm explaining the same constraint for the third time in different prompts, that's not me being thorough, that's a sign the constraint needs to live somewhere permanent (a note, a comment, a doc the agent can be pointed to) instead of being retyped from memory every time.

•

1yr ago

Request for product: voice-based dev environment

Here's my hacked-together, messy, voice-based dev environment:

  1. Voice-driven loop with screen-shotting so the LLM in the loop can see what's in my terminal and editor. The prompt varies depending on what I'm trying to drive with this loop.

  2. A few tool definitions that give read access to files and URLs.

  3. A tool the LLM can send a block of output to that generates keyboard events, so the LLM can drive any editor/terminal.

  4. A separate process watching a directory and constantly making LLM-driven git commits. (git autosave).

I have some pieces of this running most of the time. But I'm lazy, and doing other stuff, and I also try to use a variety of editors and tools, to see what's good lately. Which ... no stability, so my hacked-together stuff is always broken.

I don't want to replace @Windsurf / @Cursor / Claude code. A seriously good agent and expert-system dev toolkit is a lot of work.

•

11d ago

200 Requests Before I Noticed the Agent Was Looping

I left Claude Code running on a refactor task and came back to 200 API calls for a job that needed four. The agent

kept re-reading the same file, rewriting the same function, and re-running the same test. No error. No warning. Just a

loop with a credit card attached.

First
Previous
•••
222324
•••
Next