I was doing vibe coding and saw AI generated this code.

Notice anything? 👉 It hardcodes a fallback JWT secret (‘supersecretjwtkey’) right in the code.

It is a typical example of vibe coding output.

If you push this code straight to production without reading it, you’re basically planting a time bomb in your system.

💡 One way to avoid this is to instruct your AI coding assistant upfront with rules based on best practices. For example, in this case:

“Never use hardcoded secrets. Always load them securely from environment variables.”

By giving your AI secure coding guidelines as rules, you reduce the chance of these mistakes slipping through.

Generative AI can accelerate us, but blind trust can sink us. ⚡️

Always: ✅ Set clear coding instructions for your AI ✅ Review the code for security pitfalls ✅ Replace placeholders with proper environment variables

What are the rules you give your AI coding assistant to keep your code safe and clean?

#vibecoding #security #vibecode