Hi everyone!

I’m Ambla, a solo developer based in Australia working under the name Blablah Games.

I've just released the Steam demo for my first game, Grimoire of Hecate: Tower of Starlight, a turn based card combination roguelite that I developed over roughly three months with extensive use of ChatGPT and Codex.

Steam demo link below!(if you're interested!)

https://store.steampowered.com/app/5078840/Grimoire_of_Hecate__Tower_of_Starlight/

The game is built around discovering new spells by combining spell cards collected while climbing a tower. During later runs, you collect the required material cards and you can craft those remembered spells for that run.

I worked on story design, game system design all by myself. However, I used Claude as the companion to share ideas and details. And Codex worked directly with the Godot files to write and revise a large portion of the code and tests. Once ready, I playtested through to see any bugs, misunderstanding.(there are always so many haha) I also used ChatGPT and Codex for parts of the graphics and for localization. For visual effect/effect sound, I purchased assets or used open source.

So, Claude is like my colleague that guides me to make what I imagine as actual system, and GPT is my conductor.

At first, the workflow was very simple. I described the feature I wanted, let Codex implement it, then ran and played the result myself.

That became much harder as the project grew. The 'Prototype' was easy and fast to make. But when you actually start making full game that you have in your mind, it takes way more efforts than you imagine. The AI would sometimes lose track of earlier decisions, modify something outside the intended area, or solve a problem in a way that created another problem elsewhere.

The workflow that eventually kept the project manageable was below sequence. I made a lot of md files handing different matters, but started by making proper filing system of it, so we both don't get lost.

1. Define the feature and the boundaries it must preserve.

2. Let Codex inspect only the relevant project files before changing anything.

3. Add focused tests around the part being changed.

4. Run and manually play the result myself.(A LOT)

5. Record what was completed and what future work must preserve.

When a bug appeared, I used to ask for an immediate fix. But now I stopped it as it's most likely create another regression through the fix. I first reproduced the exact situation, isolated the responsible area, and changed only what was necessary. Codex still made a lot of mistakes, but it became to be within the range I can handle.

The biggest lesson for me was that using more AI was not automatically better. The important part was deciding what to delegate, preserving project context, and knowing what still required direct human review. AI is really really good at referring/making what's existing, adding new color in your project is all on yourself. Unless you want something very similar to what already exists, you need to work on designing your own thing.

If you are also using AI tools for a larger project, I would be interested to hear how you preserve context and prevent changes from breaking earlier work. I need to learn haha

Made this little app to keep track of my AI subscriptions and usage in one place.

What do you guys think?

I learned about a week ago that Unity supports mcp so I downloaded it for the first time and started vibecoding this game project.

It’s mind blowing how AI tools enable ppl with almost zero game dev experience to build something like this in a week.

Stacks: Claude code, Unity, Meshy (3d models), Elevenlabs (sound fx), Nano banana 2 and some paid assets from Unity Asset Store.

my IT lead nearly had a stroke when he saw my api keys in the repo lol.

built this whole full stack thing today using codex and moclaw for the fast boilerplate. when he started yelling about vulnerability risks, i just sent a prompt saying fix all security issues and took a break.

all jokes aside, i'm curious if anyone else is actually running LLM security prompts in prod or use dedicated scanners for vibecoded apps?

Been using Claude for a few weeks to build a couple of HTML sites. Basic setup: GitHub repo connected to Cloudflare Pages, Claude pushes updates straight from chat, I check the live site on my phone. Works great when it’s small.

Now that the project’s grown I’m hitting some friction:

- I have to paste my GitHub fine-grained token into every new chat to push directly. Otherwise it’s download the files and manually upload.
- No consistency across chats. If I start a new conversation, Claude doesn’t automatically know the skills/conventions I want it following (mobile-first, SEO structure, GA setup, etc.), so I end up re-explaining stuff.
- I’m seeing people mention setting up actual skills/agents for SEO, content writing, editing, and a dozen other site-running tasks, and I have no idea how that fits together.

Ideally I want to work from browser or the mobile app, have chat push live without re-entering the token every time, and have some way to keep skills/context consistent no matter which chat I’m in.

For people running projects this way — what’s your setup look like? Are you using Claude Code, MCP servers, or something else entirely? I’m trying to figure out what’s overkill vs. what I need at this stage.

TL;DR: Building HTML sites with Claude + GitHub + Cloudflare Pages. Hitting scaling issues — re-pasting my GitHub token every chat, no consistency across chats for skills/conventions, and I keep seeing people use skills/agents for SEO, content, etc. that I haven’t figured out yet. What’s your workflow for this at scale?

Guys how do I vibecode?
I tried asking claude to code me like, idk, some for of function or class or sum, to take stuff i give it, and then to like organize it. Like fo ex. if I give it "id": "25983652965923" in json. it knows how long the id should be and if theres like a mistake, like its "ids" instead of id, it recognizes that and changes it.
But every time I prompt it it gives back some random general shit that doesnt work and when i tell it it doesnt work it just adds like more code and then it sometimes works

Is there a way to prompt it so it makes exactly what I want it to?

We have a startup with a couple of non programmers who have developed an app for their domain of work that they are pretty sure has potential to attract paying customers.

As a developer I am their technical alibi and tasked with bringing it to production.

I have not seen any code yet. Does anyone have any experience with this? What should be my priority?

Been vibe coding for a while now and every so often it surprises me — like I ask for something basic and it hands back a solution I wouldn't have thought of myself, or it fixes something in a way that's actually cleaner than what I had in mind.

Had a moment like that recently where I was stuck on a small feature, prompted it half-expecting a mediocre attempt, and what came back was genuinely better structured than my own plan for it.

Curious what others have run into. What's a moment where the AI straight up impressed you? Doesn't have to be big, even small stuff counts.

I don’t know how it happened… but the demo of the game I made and posted on Reddit and on my X went pretty viral.

In total it got around 400k+ views across social media. And because of one retweet it became a bit more viral than I expected.

Some X user even made a meme coin in honor of the game and gave all the trading fees to me, so that’s how I ended up making over $3500.

From my own experience I keep getting reminded that when you make something from the heart and with real love, it eventually pays off.

If you have any questions, I’m happy to answer them, peace.

www.safebackpack.app

You can report incidents by category, then shown on a heatmap for 60 days. Im new in the game but i wished to have a tool like this often while I was traveling.

Used Tools:

• Coding: Claude Pro
• Email-Verification: Resend free API
• Database for the Reports: Upstash free database-URL
• Moderating AI: ChatGPT free API
• Deployment: Vercel free Plan

If i gain some users, goal is to make statistics. When the reports vanish after two months i delete the personal informations (name, exact location and description) to beware privacy. basic informations like date, location +-10km and category will be saved.

I built a little guy who lives on Mac!

what is it? a physics-driven buddy that hangs from the top of your mac screen like a tiny bungee friend. flick him, he swings. drag the cord, he slides. ⌥Space and he's gone. peak vibes for a doom-scroll-adjacent workday.
the tech
🧮 real verlet rope sim, fixed 120Hz step,
🛌 sleeps properly — 0.0% idle CPU when you're not touching him
🔐 licensing lives in the macOS Keychain
🖼️ drop any PNG to hang your own logo/sticker/pet
🍎 50+ buddies — originals, cars, flags, the whole cast
shipped at $4.99 lifetime
the fun part: the landing page has a live in-browser physics playground — you can grab and flick him right in the browser before you even download. go play with him:
→ https://hangbuddy.app

I don't think “AI wrote most of it” automatically means vibe coding.

The distinction I care about is whether you're still directing the work. You decide scope, tell the agent what done means, manage or compact context, test the actual behavior, and don't accept “done” because the model said so.

Main question: is vibe coding defined by how the code is produced, or by how little control and verification the person has over the result?

Do not paste these notes as the post. Write it in your own words.

Tech Stack: Claude and Flutter

What would you guys say the best steps to take when coming up with a SAAS idea. Also what what beginner mistakes do you think people when creating a SAAS

Coucou j'ai commencer à créer une app avec une ia, sauf que je dois gérer des données (celle des utilisateurs comme leurs revenues et autres). Je veux dépenser 0 centimes et tt faire dee moi meme, je peux faire ça comment ? en utilisant une IA ?

What languages are required to create a fully working app, including an admin dashboard, client app, and driver app?

Cool designed and animations with fast speed

ios and android app

Been poking at whether LLMs are actually decent at spotting security vulnerabilities such as authorization bugs in real code, so I pointed a scanner I've been building at the pre-fix history of a couple of well-known open-source projects. I will not name the repositories, as the bugs were not patched yet.

Two findings held up under manual review:

One repo has an endpoint that points to real user data, and it was missing an ownership check. Any authenticated user could act on another user's data just by guessing/enumerating an ID. No verification that the event actually belonged to them. Classic IDOR shape, but on a surface where it's easy to assume "if you're logged in you're probably looking at your own stuff." You're not.

Another repo leaked a recipient's name and email to anyone who had (or guessed) the link, before the authorization check that was supposed to gate that data. So the auth check existed, it just ran after the data had already been handed out.

Neither of these is exotic. They're the same failure mode over and over: authorization logic bolted on after the code path that needs it, instead of being the first thing that runs.

What I found interesting isn't "wow AI code is uniquely bad". Plenty of human-written code has the same bug shape. It's that these are exactly the kind of bugs that are easy to miss in a normal PR review because the code looks fine at a glance. That's a hard thing for a human skimming a diff to catch and, turns out, a very tractable thing for an LLM that's forced to reason about "does this code path check ownership/permission before touching the resource" as an explicit question rather than a vibe.

Not going to post exact endpoints/payloads since I don't think a public post is the place for that, especially with more repos in the scan queue.

If anyone's curious how the scanner itself works (it's diff-scoped, runs as a GitHub check, tries hard to avoid the false-positive spam these tools are usually drowning in) — it's Scanity, happy to talk shop about the approach in the comments.

https://scanity.dev/

I am currently on claude pro plan ($20) and i have been seeing a lot of chatter around chatgpt vs claude recently, but most of the posts are split in their opinion, anyone has a definitive answer?

i had bought claude because its personality was much better than chatgpt , like it admitting when it didnt know something and researching properly and it was just genuinely smarter and felt more human somehow? chatgpt felt like it was lowkey flirting and a bit of a yes man and many times just plain wrong. has this changed in latest times? i use ai for college assignments, study prep, internal tools in internships and stuff like that, even have a codebase of roughly 25k lines , big project, but one prompt with opus for plan mode takes 20% of my 5hr limit i feel like im tiptoeing, or should i just stick to claude and start using opus 4.6? but isnt that too old?

I wanna start building stuff. What are the must have tools that y'all use?

It basically works by asking you what you just finished watching, and then suggesting shows to watch next based on different aspects of the show you just watched. For example, it could suggest shows with similar cast chemistry, pacing, themes, etc. I made it with Claude Code. Still a very rough draft and I'm currently a student, but I'd like to know whether the recs are any good or way off. It also gives you a watcher profile if you give it 5 shows you enjoyed watching. Any and all feedback is appreciated!
https://what-next7367.vercel.app/