Umar FarooQ

Unpopular opinion from someone who uses AI agents daily: Vibe coding is great for prototypes. It is dangerous for anything that stores user data and has not been reviewed line by line. Speed is not the same as done.

Everyone adds AI features to their Laravel app. Almost nobody threat-models them. Prompt injection is just SQL injection's younger cousin: user input reaching a place it was never meant to touch. Validate LLM input and output like you validate forms.