14-year-old Pranav Paudel surprised his family by gifting a static website created through Vibe Coding for his sister’s birthday. Nepal Telecom and various government agencies are utilizing Vibe Coding to develop internal software systems related to licensing, taxation, and payments. Cybersecurity experts warn that AI-generated code may have security vulnerabilities and recommend mandatory security testing, code reviews, and human oversight. (4 Bhadra, Kathmandu)
Pranav Paudel, a ninth-grade student, gifted his sister a static website on her birthday. The creative design of the gift amazed his sister, who was unaware that Pranav had undertaken any IT courses. Studying at Manakamana School in Narayantar, Kathmandu, Pranav’s interest in Vibe Coding brought joy to the family as they saw his enthusiasm for learning new skills.
What exactly is Vibe Coding, practiced by this 14-year-old ninth grader without deep technical knowledge? Vibe Coding involves describing what needs to be created in natural language, and AI generates the corresponding code. Users do not have to write every line of code themselves; instead, they provide prompts such as ‘I want a website with this design’ or ‘When this button is clicked, perform this action,’ and the AI tool generates the code accordingly.
Cybersecurity professionals, however, express concern. According to a report published in Computer World, AI-generated code may introduce many security weaknesses. Vibe Coding can pose significant security risks for enterprises and increase the likelihood of data leaks. Nevertheless, some experts suggest adopting a hybrid approach rather than completely rejecting Vibe Coding.
While Vibe Coding’s popularity is growing worldwide, developers in Nepal’s public and private sectors have started using it. However, it remains a relatively limited practice among the country’s large and established technology companies.
Cybersecurity expert Naresh Lamgade notes that Vibe Coding is a powerful tool to speed up development, enabling organizations to create necessary software more easily. However, since AI’s primary focus is task completion, it may sometimes overlook security considerations.
Users of Vibe Coding must carefully safeguard secret keys and only proceed to host and launch once these are securely stored. A round of security testing is essential. When these measures are followed, Vibe Coding cannot be dismissed outright.
