Vibe coding without coding skills: Ben Sufiani on security risks

Ben Sufiani, founder of the platform Pirate Skills, can't program. Even so, he builds websites, apps and his own AI agent, CaptainAI. In a podcast interview, he describes what vibe coding gives him, and the dependencies and responsibility that come with it. His blunt warning: "We vibe coders are easy prey for hackers."

Filling gaps with ready-made skills

Sufiani says his strengths lie in analytics and performance marketing, while design and software development are weak spots. To cover them, he searches the platform skills.sh for established agent templates. He works mostly with Next.js and used it to build his own website and move away from WordPress. Skills from Vercel act as a safety net, he says, and keep him from the worst mistakes. Design is harder because it is a matter of taste, so he has the AI offer a buffet of design directions and acts as curator.

Monitoring instead of reviewing

Sufiani can't review the code himself, so he relies on a stable tech stack the AI knows well. Vercel logs all errors users encounter, and his agent reads them regularly. Clear cases are fixed directly; uncertain ones are discussed with him. He calls this an apparatus built around a product that constantly watches its state. In full form, he says, it becomes a software factory.

He has no human reviewer in the background, only agents. Not understanding everything can even help, he argues, because it removes bias. For long conversations he uses the speech tool Whisperflow to give the AI context and voice concerns. Over time, he says, he has developed a sense for when better answers are needed. He has had no major incidents so far.

More than one-shot prompts

Sufiani stresses that using vibe coding responsibly takes a great deal of accountability. He dismisses claims that a GitHub framework can "steal the whole Adobe Suite" in one sentence as nonsense. In his view, vibe coding raises the floor for people who couldn't code before, while agentic engineering is the complementary discipline behind software factories. He lists six core areas vibe coders must master: product management, tools, user experience, scalable systems, security and compliance, and shipping.