Overshot — find the TikToks breaking out, and what they're selling

Loading video…

SEE THE THING THAT

@itsthatlady.dev

29.0K followers · usually 1.5K views a post

Views

5.2K

Likes

297

Comments

151

Selling · Other Product

—

Why it worked

The video addresses a common pain point for developers using AI for coding: security. By highlighting the risks and offering a solution (a checklist), it provides valuable information that resonates with the target audience.

Summary

The video explains that while AI is good at making things work, it's not good at making them safe, often leading to security vulnerabilities like exposed API keys and SQL injection. It offers a checklist of common vulnerabilities and their fixes for AI-coded apps.

Structure

1AI is good at making things work, but not safe
2Common security vulnerabilities in AI-generated code
3Fixes for these vulnerabilities
4Offer of a checklist and fixes

Product placement

AI (acts - generates code, but is not a specific product, so it is not listed here) Replit (appears - creator's bio link, but the page title is 'Just a moment...', so it's not clear if it's the product being promoted or just a link aggregator. Therefore, it is not listed as a product that acts or appears.)

Call to action

COMMENT "CHECKLIST" AND I'LL SEND YOU

On-screen text

SEE THE THING THAT Tells you about IS THAT AI AT MAKING THINGS THAT WORK, BUT IT'S REALLY AT MAKING THINGS THAT ARE SAFE. I'M TALKING ABOUT EXPOSE ON ON THE CLIENT SIDE. ON AND THAT CAN BE INJECTED FROM THE THESE cases. AI does automagically build When I look at the FEW APPS I BUILT THE SAME THE SAME TEN SECURITY HOLES SHOWING UP OVER EVERY TIME. fix takes less. 5 A 10 A LIST OF THE MOST COMMON SECURITY VULNERABILITIES IN VIBE CODED AND THEIR FIXES. COMMENT "CHECKLIST" AND I'LL SEND YOU

Original caption

If you've ever shipped something built with AI and gotten that little voice that says "…is this actually safe?" This is for you. Here's the truth: AI tools are optimized to make things work. Not to make them safe. So when you vibe code an app, the default output usually has: → API keys exposed on the client → Endpoints with zero authentication → Database queries vulnerable to injection from the browser You're not doing anything wrong. This is just what AI does automatically. The good news? The same 10 holes show up in nearly every vibe-coded app I've audited and most of them take 2 minutes or less to fix. I made you a checklist with all 10 + the fix for each one. Comment "checklist" below and I'll DM you the link 💌 #ai #vibecoding #appsecurity