Loading...
Loading...
Loading...
DYKWYBLSby Island Pitch
Do You Know What You Built Last Summer?!
You vibe coded it. You shipped it. Now let's find out if you actually know what's in there. No shame — just truth.
Do You Know What You Built Last Summer?!
You vibe coded it. You shipped it. Now let's find out if you actually know what's in there. No shame — just truth.
This is a sample report showing what a DYKWYBLS audit looks like. Start your own audit
Your Verdict
Your code works, but there are gaps in your understanding. Knowledge is protection.
Where you landed on the comprehension matrix
Good code, flying blind.
Solid code, total understanding.
Flawed code, flying blind.
Flawed code, but you know it.
You know your app uses React and a database, but you are fuzzy on the details. The good news: your architecture is actually pretty solid.
Your AI tools chose well-established patterns, but you should understand why they made those choices. If something breaks, you need to know where to look.
Next.js 14 App Router with TypeScript strict mode. PostgreSQL via Prisma ORM. Authentication through NextAuth.js with JWT sessions. No significant security vulnerabilities detected.
You mentioned 'the database handles it' when asked about data security. That is a yellow flag. Your data is actually encrypted at rest, but you did not know that.
Your app stores user data, and while the AI set up encryption, you should be able to explain your data flow to users, investors, or regulators.
AES-256 encryption at rest via PostgreSQL. HTTPS enforced. However, PII is logged in plain text in development mode. No data retention policy configured.
Your app looks great and works smoothly. You clearly care about the user experience. But the AI skipped some accessibility basics that could exclude users.
Around 15% of users have some form of disability. Missing alt text and keyboard navigation means they cannot use your app. This is also a legal risk.
Responsive design with Tailwind CSS. Good Lighthouse performance score (92). Missing: ARIA labels on interactive elements, skip navigation link, focus management on route changes.
When asked about your test coverage, you said 'I think there are some tests.' There are exactly zero tests. Your deployment is a manual process with no CI/CD.
Every time you push code, you are gambling that nothing breaks. With AI-generated code you do not fully understand, this is especially risky.
No test files detected. Manual deployment via Vercel CLI. No staging environment. No database migration strategy. package.json has test script pointing to non-existent jest config.
This was a sample. Your report will be personalized to your project, your repo, and your answers. We don't scan your app. We introduce you to it.
Meet Your Code