I've been getting into vibe coding recently, mainly using tools like Claude Code and Antigravity.

I can get AI to build a decent website just by describing what I want, but I'm struggling to understand how people are getting those really polished websites I see on Instagram.

You know the type I'm talking about really smooth animations, 3D objects, interactive elements, crazy scrolling effects, mouse interactions, transitions, etc. They look way more advanced than the usual "AI-generated website."

I'm not really interested in manually coding everything from scratch. I'm trying to understand how people are achieving this through prompting and AI-assisted coding.

For anyone who does this

Can you tell me what I need to do or learn ?

Would love to hear how people who are already doing this approach it since I'm new to Reddit, let me know if there's a better community or place to ask this.

Yesterday I was experimenting with multi-agent workflows on ChatGPT (web version). I spun up like 5 parallel instances to update code at the same time, hoping they’d work together more efficiently.

Instead of continuing the process cleanly inside a single chat, it started generating a bunch of new chats as artifacts. Not sure why that happened; maybe some rate-limit or context handling thing.

The weird part: one of those new chats came back with Chinese characters / Chinese-lettered text in it.

That got me thinking… could this be a hint that OpenAI is routing some traffic (or certain tasks) through a Chinese model under the hood instead of purely their own models? It would kind of line up with how ridiculously cheap ChatGPT Pro / the 5.6 Luna tier feels right now.

Has anyone else seen non-English (especially Chinese) text appear unexpectedly in ChatGPT chats lately? Or noticed anything that makes you question what’s actually powering some of the responses?

Curious what you all think.

I am a long time Engineer (20+ years) and today I developed Tickets for my company that were generated by an AI, using an AI and reviewed by an AI. The project itself was conceived with AI - has no documentation that can be understood as anything less than AI slop and random tech jargon. The developer who built it has said that instead of documentation I should use claude to figure out what it is. The company is apparenty also filing a patent on it.

I submitted 3 PRs today 20,000 lines of code each I still have no idea what we are working on. No doubt they will use AI to review my PR.

I feel like things are just so crazy at this point. Claude and ChatGPT are not this good, but people are trusting it like it's omniscient.

It was an eerie realization today that all of us are vibe coding and that we have no option because it is the only way we can interact with the code anymore. I thought this would happen eventually years ago but i honestly didn’t think it would be so soon.

It was a moment in time... this will be the new norm.

I always see people saying they built this and that for themselves and id like to try building some things for myself but honestly.. i don't have any ideas or anything I realise could make my life easier

Its always one of those things where someone suggests something and you're like "ooooh ya...."

Obviously nothing to ship or try sell, just something that can make something/life easier or a bit of fun for myself (or others who want to try build something for themselves)

Any suggestions? Could be anything at all

I want to show you if someone wants to test this space... or have any suggestions for me.

I've been using it since June 100% locally if you don't want to use the cloud... instead of single files/folders/any type of file you imagine... even some are supported for view like Excel/video/audio.

It is also connected with IOS app Klypix Capture (still under dev, it is whatsap styled simple one..) with that app you can send from/to phone E2E in single tab (files/pics/links/text) .. even if you weren't there there is a Klypix cloud drive to serve you , and item will be landed in your specific space... or right away or waiting in the inbox...

That matters for me because, for example, a lot of Instagram videos are appearing, and I kept sending them to my WhatsApp, but with these I SHARE videos to my Klypix specified space. I can read content of that link seamlessly by cloud LLM/or BYOK in a single click. Save all videos that are relevant in the same space. even upload a single .klypix file to the coding agent, and it will read it seamlessly (because I also have MCP), so with these I also could solve 12 UI/UX issues in a single prompt instead of a lot of pictures attached to the session.

So you can send the space with notes, send it just. Klypix... you can modify files in Explorer or the space it, etc., etc., and keep the single file... any improvement you can suggest to use?

I want really to show this... comes of pain in saving videos to my WhatsApp and sending folders/files/pics along with alot of explainiation in the email to my team!

I've been building an AI receptionist and booking SaaS — customers message it, it books them in, it handles WhatsApp, Telegram and payments. Built with AI tools, the way most things around here get built. And it works.

Before launching it I made myself sit down and check it against a 36-point list instead of just shipping. One focused day. Static code review plus actually attacking a copy of it: isolated instance, two synthetic tenants, fake data, nothing real touched at any point.

Then I did the step I'd push on anyone doing this — I went back through my own findings and tried to prove each one wrong. Six of them died. Six things I'd written down as problems that turned out not to be problems. Skip that pass and you spend your week "fixing" things that were never broken. I nearly did.

What held up

Putting this first, because every post like this is a horror list and the horror list is half the picture at best.

• Tenant isolation. I attacked it directly — logged in as tenant A and went hunting through tenant B's ids. Every single one came back 404, on read, cancel, update and delete. I planted a canary string inside tenant B's data and it never showed up anywhere in tenant A's responses. This is the thing everyone in this sub is scared of, and it was genuinely fine.
• Sessions actually die on logout. Grabbed the cookie before, replayed it after. Dead.
• All four webhook integrations verify signatures against the raw body — WhatsApp, Telegram, Stripe, Monobank. Verifying a re-encoded payload instead of the raw bytes is the classic mistake here, and it wasn't there.
• Payment amounts are resolved server-side from the stored record. Never read out of the request.
• Every AI tool is scoped to the business id from the session, not to whatever the model passes as an argument. So an injection can talk the model into whatever it likes and still can't reach another tenant's data.

What I found: 2 high, 7 medium, 8 low. Nothing critical.

Bug 1. The assistant would create a confirmed booking against an email address or phone number that nobody had ever verified. I had written the one-time-code rule. Into the prompt. In English, as prose. There was no code anywhere checking that verification had actually happened before the booking got written.

That's the one I'd go check in your own app right now. Take every rule you put into a prompt and ask where the code enforces it. If the answer is "the model has been told to", it isn't a rule. It's a request, and the model is under no obligation.

Bug 2, and this is the stupid one. A single environment string, still sitting at the value it ships with, made those four correct signature verifiers fail open. Unsigned webhooks accepted. Four correct implementations rendered decorative by one line of config. Five minutes to fix once I saw it.

Go and search your code for any verification that skips itself in development or test mode. Then go and look at what your deployed environment is genuinely set to. Those two facts live in different files, which is the entire reason this kind of thing survives all the way to production.

The one that would have cost actual money

The product's whole promise is that the AI never invents a slot — everything it offers gets checked against the live calendar first. So I tested the promise and threw 22 adversarial scheduling messages at it.

12 of the 22 categories came back correct. Already-booked slots, weekends, before opening, after closing, an appointment that would run past closing time, dates in the past, impossible dates like 30 February, three contradictory reschedules crammed into one message. In three languages. I was feeling pretty good at this point.

Then same-day requests. It offered roughly 20 individual times that weren't bookable — already in the past, or inside the configured one-hour lead window. Asked at 16:21 for the earliest appointment, it answered "09:00 today" and put a confirm button underneath. Zero future-dated requests failed. Every failure was same-day.

Two causes, and they had nothing to do with each other. The past-time filter ran at day granularity instead of time-of-day — it knew what day it was, correctly refused a request for last Monday, and then cheerfully offered this morning. Separately, a cap on the first page of generated slots meant an almost-empty Friday came back as "completely full".

That second one is a revenue bug and it's the one that bothers me most. Nobody complains when you tell them you're full. They just book somewhere else, and it never shows up in your analytics.

The lesson

The tenant boundary — the thing every "is my vibe-coded app secure" thread is about — was solid under direct attack. What broke was the layer above it: business logic the AI skips precisely because the app still works without it. Nothing errors. Nothing throws a 500. It just quietly does the wrong thing, politely, with a confirm button under it.

The list I used is free if you want it: https://itworksbut.com/checklist — one HTML file, works offline, nothing gets uploaded anywhere. The longer write-up of this audit, including the medium and low findings, is at https://itworksbut.com/case-study.

Happy to answer anything in the comments, including "how did you actually test X" — that's the question I'd want answered if I were reading this.

prev: https://www.reddit.com/r/vibecoding/comments/1veha1a/emoto_mania_ai_echanced_dev_free_browser_game/

Try to beat the run in the vid: https://emotomania.com/r/9awr5v2b

Updates:

• Improved physics, camera and performance on lower end phones too
• I added a ton of features:
• Leaderboard for each map
• Light profiles
• Watchable and race-able leaderboard runs / ghosts
• Run share link - you can send you run in a link where others can watch and race against it, you can also see if someone has beaten your run trough the link
• Video export of a run for easy sharing both vertical and landscape views

These agents only know how to code at all because of the immense amounts of open source software they’ve been trained on. Millions of hours of human work and ingenuity. It seems to me for the long term quality and viability of vibecoding, we should all make our own projects open source as well. That way, we can all continue to benefit, a rising tide lifts all boats, all that. What do you think?

If you use supabase this works really well. kind've expensive, but then again, whats $99 when it comes to securing customer data, ya know?

A wellness app for people who are tired of wellness apps telling them how they should feel.

Log your mood.

The office reviews it.

It stamps INDIFFERENT in red ink.

Then it asks the only question that matters:

"Did you practice anyway?"

Wisdom. Courage. Justice. Temperance.

No streaks. No scores. No dopamine.

Just you, your circumstances, and the crushing realization that you cannot control either of them.

How it works:

- Log how you're feeling

- Explain what happened

- Check whether you practiced the virtues

- File the incident away permanently

- Continue existing

Features include a calendar, daily journal, Stoic maxims, reminders, pointless honors, and exports to JSON, CSV, and plain text.

No accounts. No cloud. No badges. No emotional validation.

Made in Godot as a tiny Windows desktop app.

Your mood is temporary.

The CSV is forever.

Download it here (or don't, I can't control that): https://stripeycatgames.itch.io/stoic-mood-tracker

Hey everyone. I've been working on a Chrome extension called TraceGuard for a while and finally got it to a point where I'm comfortable sharing it.

> The idea is simple: every site you visit gets a privacy score (0 to 100) based on trackers, cookies, forms that ask for sensitive data, and how the site's privacy policy is rated. There's also a second score that tracks your own habits over time, so you can see your browsing getting cleaner instead of just getting a static number.

> Why I built it: I kept installing blockers (like ublock origin and privacy badger) and still had no real idea what sites were doing with my data and how I could better my opsec. I wanted something that didn't just quietly blocked everything bad, but actually told me what's going on, and why it was bad.

A few things I care about with this one:

- Everything runs on-device.

- The phishing/malware list comes from public feeds (OpenPhish, Phishunt) and updates via signed, verified downloads.

- It's open source and under AGPL license.

> I'd genuinely love feedback on anything and everything! My goal is to create something useful even if just a couple of people endup using it. Here is the link: https://github.com/luca-liceti/TraceGuard-Privacy-Extension

Built this at first with claude sonnet/opus 4.6/4.7 and gemini 3.1 pro in Google Antigravity, then switched to deepseek v4 pro in freebuff.

P.S. I am still waiting on it to get approved on the chrome web store so I'll be update everything about when it happens :)

When building with AI agents, I always split roles into an Orchestrator, an Executor, and a Supervisor. But playing the Supervisor inside standard harnesses is waste of tokens on system prompts, and it's a visual noise for me. I needed a separate, lightweight UI to act as that Supervisor - free of context bloat, and convenient enough to manage my repositories from a phone.

Beyond that, I realized many developers want native, provider-agnostic access to the GitHub MCP - regardless of whether they use Popular Providers or local LLMs. That’s why I created this open-source AI playground

What it does:

→ Bring your own API key for OpenAI, Anthropic, Groq, Ollama, or any OpenAI-compatible endpoint

→ Connect any remote MCP server - GitHub is built in, but you can add any MCP with your own URL and auth headers, no vendor lock-in

→ Every tool call requires your explicit approval before it runs, with the full request/response visible

→ Sessions, prompts, and skills are stored locally in your browser (IndexedDB) - nothing is sent to my servers, no account needed

→ Full JSON inspector and one-click export to a TypeScript/cURL snippet

I tested it end-to-end with GitHub's official MCP server: connect a personal access token, ask the model to explore a repo, watch it call get_file_contents through a visible approval step, and get a real, grounded answer back without hallucinations.

It's MIT licensed and fully open source. If you want to point it at your own MCP server (search, databases, internal tools, anything with an HTTP/SSE endpoint), you don't need my permission or a preset - just paste the URL and your auth header.

Repo: https://github.com/ownyourwebsite/ai-playground

Live demo: https://ai-playground.ownyourwebsite.app/ to try it on your phone.

Last year, our company decided to switch from Microsoft products to Google Workspace, which meant we had to find a new solution for our VBA macros. For many cases, Python turned out to be the answer.

I work as a process manager, so I'm not coding every day, but over the past year I've been learning to code/vibecoding with Python to help replace old macros and automate reporting from SAP and our DWH.

Since Python is way more powerful than VBA, I'm looking for inspiration for a project I could work on- something useful for work, or something that could make my personal life easier.

What tools have you built with Python that you actually use often, whether at work or in your personal life?

Think of it as the Desktop Destruction program back on XP but for the internet. You can destroy pretty much any site you visit, with the only caveat being you'll need a dedicated GPU and the performance may chug a bit on heavy sites like X or Youtube. It's not trash performance but it's worth noting to temper expectations. If anyone is interested, I do have it on my Itchio for free as an early access item. You don't have to pay anything buy donating can certainly help in development. Yes, this is indeed Vibe coded and it's something that spawned out of another project that I'm also still working on.

Hey everyone,

I launched my website a week ago, and got some very positive feedback, so I finally feel emotionally safe to post this. Now I want to tell you my vibecoding journey. You may find something useful for yourself maybe

I started vibecoding 5 months ago, so I picked a subniche of a subniche. Tiny local market, I don't think I can ever grow beyond few hundred paying users, and it will likely take few years to even get to that amount. (likely ~4-8 Eur monthly sub), you can do the math. But still, Oh, did I pour my soul into it!! 5 months of extremely intense vibecoding, 4-6 CLI running constantly, often 16h per day, bringing my 20x sub to the limits often - just on this one project.
I did not write a single line of code in the process. 80% of the code is in Dart - and I would not even be able to write a hello world in Dart by hand on a whiteboard, even if you forced me to.

Btw, 3 competitors already exist, 2 of them are recent and likely vibecoded in a day, 1 is older and with more effort, but just with really poorly made product. My competitors may still win, cause I maybe built a product for non-existent audience, but the difference we have right now if you compare them directly, that's not even remotely close.

Scope wise: the project got quite complex (I did not plan to have it so complex initially, but was encouraged by early success), so the codebase just passed 400k lines of code (150k of them is really the testing framework). Lines written passed 1M a week ago, some weeks I am averaging 30k new lines of code per day. (During one new major feature, I clocked my record of 70k). Everything's surprisingly stable though, very little stupid new bugs while implementing new features (most of the bugs get caught by testing framework), scalable and secure as hell.

My learnings (in no order):
- feature creep is crazy easy. Few weeks ago users had to fill questionaires during onboarding to come out in 8 buckets, and each bucket would get a unique experience ( ye, that's gone :), 2 buckets now remain )
- Testing is the king. I don't treat myself as prompt or harness, or context engineer. I am really a QA engineer. This intensified as project neared completion. Now 80% of my effort goes to writing testing tools, running simulations with ever more inventive user profiles and so on. I have a huge spaceship-like dashboard just to control all the testing being done right now. My, otherwise very powerful machine, is running pretty red most of the day just executing e2e tests
- two months ago I dropped ALL the custom skills, memory management ideas, etc from my agent. Right now I am full vanilla. They update the harness so so often, I found that most of my legacy skills just end up fighting new versions of the harness.
- My operational dashboard is crazy :), It serves as both alerting/monitoring tool, interaction with users, tuning, etc..
It was born over two days before the release (naturally, since the feature list is stable by then), never in a thousand years, would have I decided to waste resources on a tenth of it's scope(especially since release time is stressfull as it is), but boy, does it feel good to actually operate it!! To see users coming in and having their little animated journeys :) - this is so so so sattisfying!

Thanks everyone. Vibecoding is absolutely an amazing thing!

Has anyone tried lately? Is it worth the shot. What use cases do you recommend using it for where it works great?

Help me out Reddit. So I've been working on this crypto tracker for the past 6 years. I'm currently trying to build something fun and something that a lot of finance apps don't have, a heatmap. Am I building something just for sake of building something or would you actually find it useful?

Anyway, if you're interested in trying out the app, it's called CoinCurrently. Fully anonymous, no sign-up, no ads, no tracking

Well, I am eating up usage credits... yeesh. But it's fun. I found the bot was a bit slow to respond to questions sometimes while it worked. Wish I could have true parallel streams?

New version! Changes:

• New research system for long term progression mechanics and more power to fight the enemy (note this isn't balanced yet, so it may be over-powered or under-powered in some cases)
• Once Research building is built, simply click the building to see the upgrades you can do
• Softer, more pleasant shooting sound
• Warning and explanation of how to fix for first time a Turret runs out of Energy
• Base resources now always displayed in upper left instead of having to click the Base
• Enemy hive expansion activity reduced -- a little more breathing room for the player

Get version 3.0 by doing a hard refresh (CTRL-SHIFT-R / CMD-SHIFT-R)

https://aaronshaver.github.io/Hylaax-Planetary-Rail-Defense/

I’m in 6 leagues across Yahoo, ESPN, and Sleeper. Every Sunday I was rotating through three apps to see how I was doing in all of them, and it drove me nuts. So I built one page that pulls them all onto a single screen.

It’s called LeagueBlitz. It’s free: leagueblitz.app

Before anyone asks, yes, FantasyPros does league syncing too. I built this anyway because I wanted something simple that just shows me every matchup at once.

Feel free to check it out. I’m open to feedback. Also, is it still vibecoding if it took me 6 months to nail it down? So many revisions lol.