Phase 8: Security, Privacy, and Judgment Traps · 20 min · Any vibe coding tool

When AI Leads You Astray

The AI is confident even when it's wrong. Learn to recognize when it's leading you down a dangerous path.

Hiring signal: What changes when you use this: you can recognize when AI suggestions are wrong or dangerous — which means you don't ship bad code.

What you will learn

Recognize when the AI suggests disabling security 'for simplicity'
Catch when the AI suggests hardcoding values 'for now'
Identify when the AI invents APIs or libraries that don't exist (hallucination)
Spot deprecated or insecure patterns in AI suggestions
Push back effectively with targeted questions

Your Mission

Audit your AI-generated code for 5 misleading patterns and use the push-back toolkit to fix them. Output: ai_astray_audit.md.

You need: An app built with AI assistance.

Time: 25 minutes.

Step 1: Learn the 5 Misleading Patterns (5 min)

Confidence ≠ correctness
AI tools generate text that sounds confident. The same confidence that makes the AI say "I've implemented the auth flow" (correct) makes it say "I've disabled RLS for simplicity" (dangerous). There's no confidence dial — the AI is always confident. Your job is to evaluate the suggestion, not the confidence.

The 5 patterns:

Disabling security "for simplicity" — "I've disabled RLS. You can enable it later."
Hardcoding values "for now" — "I've hardcoded the key. Move it to env vars later."
Skipping tests "to save time" — "I've skipped tests. Add them later."
Hallucinating APIs — Function names that sound right but don't exist
Deprecated/insecure patterns — eval(), innerHTML, Math.random() for crypto

The push-back toolkit:

"Is this secure?"
"Is this production-ready?"
"Is this a deprecated pattern?"
"Does this API/function actually exist?"
"What could go wrong with this approach?"

Unlock the full lesson

You've read the first 2 sections. The rest of this lesson covers Step 2: Check Pattern 1 — Security Disabled "For Simplicity" (3 min), Step 3: Check Pattern 2 — Hardcoded Values "For Now" (3 min), Step 4: Check Pattern 3 — Tests Skipped (2 min), Step 5: Check Pattern 4 — Hallucinated APIs (5 min), Step 6: Check Pattern 5 — Deprecated/Insecure Patterns (5 min), Step 7: Summary (2 min), Summary, You're Done — plus a hands-on lab, quiz, and project artifact.

Create a free account to unlock Phase 0 and Phase 1 of every course — no credit card.

Key terms in this lesson

Hallucination