为什么必须审查人工智能代码
人工智能很自信，但有时也会出错。
为什么必须审查人工智能代码 是 CoddyKit 上的免费 Vibe Coding 课时。 这是第 1 节课，共 4 节。 你可以在下方免费阅读本课时的完整内容 — 然后在浏览器中使用内置代码编辑器和全天候 AI 导师进行实践。 这是 Vibe Coding 学习路径的一部分，你的进度在网页和 CoddyKit 应用中同步。 Vibe Coding 课程共包含 4 节课。
本课时的部分内容尚未翻译，以英文显示。
AI Is Confident, Not Always Correct
Vibe coding lets you build fast by describing what you want. But here's the catch: AI writes code that looks right and sounds right, even when it's quietly wrong.
The model isn't lying on purpose. It predicts plausible code. Plausible isn't the same as correct, safe, or what you actually meant.
This lesson is your reality check: you must review AI code before you trust it. It's the single habit that separates people who ship working apps from people who ship broken ones.
What 'Confidently Wrong' Looks Like
Ask AI for a function to calculate a discount, and it might hand you something clean and readable that does the wrong math. No warning. No hesitation.
Run this snippet. It claims to apply a 20% discount, but read the logic carefully before you trust the output.
function applyDiscount(price, percent) {
// AI 'helpfully' divided instead of multiplied
return price - percent / 100;
}
console.log(applyDiscount(100, 20)); // expected 80, but...The Bug You Almost Missed
That code printed 99.8, not 80. It subtracted 20/100 = 0.2 from the price instead of 20% of the price.
The code ran without errors. No red text, no crash. That's the danger: AI bugs often hide as working-looking code that produces silently wrong numbers.
If you'd shipped this to a real store, every customer would get almost no discount and you'd never see an error message telling you why.
Why AI Makes These Mistakes
Understanding why helps you review smarter. AI gets things wrong because it:
- Guesses your intent — it fills gaps in vague prompts with assumptions.
- Mixes patterns — it blends snippets from millions of examples, some outdated or buggy.
- Hallucinates — it can invent functions, libraries, or APIs that don't exist.
- Loses context — it may forget a rule you set ten messages ago.
None of this means AI is bad. It means AI is a fast junior teammate whose work you sign off on.
You Are the Senior Reviewer
Reframe your role. You're not just typing prompts — you're the reviewer and decision-maker. Tools like Cursor, Claude Code, and Copilot generate; you approve.
In Cursor and Claude Code, AI proposes changes as a diff (what it wants to add or remove) and waits for you to accept. That pause is your superpower. Use it.
Pro move: never click 'Accept All' without skimming what changed first.
The Three Questions to Always Ask
For any chunk of AI code, ask yourself three quick questions:
- Does it do what I asked? Match it against your actual goal, not what looks impressive.
- Could it break or be unsafe? Empty inputs, missing data, exposed keys.
- Do I understand it enough to fix it later? If it's magic to you now, it'll be a nightmare at 2am.
These three questions take 30 seconds and save hours.
Make the AI Review Itself
Here's a trick: AI is often great at finding problems when you point it at code — even its own. After it generates something, ask it to critique its work.
This isn't a guarantee, but it surfaces obvious issues fast. Paste a prompt like the one below into Cursor or Claude Code.
Review the function you just wrote.
List any bugs, edge cases it misses, or security risks.
For each issue, show the exact line and a corrected version.
Be blunt — assume something is wrong and find it.Don't Trust Invented Libraries
One of the most common AI mistakes: it imports a package that sounds real but doesn't exist, or uses a function the library never had.
The example below references a made-up helper. If you blindly trusted it, your app would crash on the first run with a 'is not a function' error.
// AI invented a 'magicValidateEmail' that isn't real
import { magicValidateEmail } from 'super-validators';
function signUp(email) {
if (magicValidateEmail(email)) {
return 'Welcome!';
}
return 'Bad email';
}
// Always verify the import and function actually existReviewing Saves You Time, Not Costs It
Beginners worry reviewing slows them down. The opposite is true. A 30-second review now prevents:
- Hours hunting a silent bug that ships to users.
- Embarrassing demos where the app does the wrong thing.
- Security leaks like exposed API keys or open data.
Fast building plus light review is the real vibe coding speed. Building blind just front-loads the pain to later.
A Simple Review Habit
Build this loop into every session:
- Generate a small piece (not a giant blob).
- Skim the diff before accepting.
- Run or test it to see real behavior.
- Ask AI to explain anything you don't understand.
Small chunks + quick checks = catchable mistakes. Huge accepted blobs = bugs buried where you'll never find them.
Trust, but Verify
The mindset of a great AI builder: trust the AI to move fast, verify before you ship.
You don't need to write every line yourself. You do need to be the human who checks that the line is correct, safe, and what you wanted. The AI is the engine; you're the driver with eyes on the road.
Next up, we'll learn how to actually read code you didn't write — even if you're new to it.
Quick Check
You ask AI for a discount function. It returns clean code that runs with no errors, but the math is wrong and customers get tiny discounts. What does this teach about reviewing AI code?
Recap: Be the Reviewer
What you locked in this lesson:
- AI is confident but not always correct — it predicts plausible code, not guaranteed-right code.
- The scariest bugs run without errors and produce silently wrong results.
- You are the senior reviewer: generate fast, but skim every diff before accepting.
- Ask the three questions: does it do what I asked, could it break, do I understand it?
- Watch for invented libraries and let AI critique its own code.
Reviewing is the habit that makes vibe coding reliable. Next: how to read code you didn't write.
常见问题解答
「为什么必须审查人工智能代码」课时是免费的吗？
是的 — 「为什么必须审查人工智能代码」的完整文本可在网页上免费阅读。要进行交互式练习（内置代码编辑器和全天候 AI 导师）并解锁 Vibe Coding 课程的其余内容，请升级到 CoddyKit PRO。 Vibe Coding 课程共包含 4 节课。
「为什么必须审查人工智能代码」这节课中我会学到什么？
人工智能很自信，但有时也会出错。 你通过在浏览器中直接运行的动手代码来练习 Vibe Coding，全天候 AI 导师会在你学习这节课的过程中回答你的问题。
学习 Vibe Coding 需要有经验吗？
无需任何先前经验。CoddyKit 上的 Vibe Coding 课程适合初学者到高级学习者，你可以从这里开始或从头开始，按照自己的节奏学习。 这是第 1 节课，共 4 节。
「为什么必须审查人工智能代码」课时需要多长时间？
大多数 CoddyKit 课程大约需要 5–10 分钟。每节课都很精短且互动，所以你能稳步进步，并在网页和应用中从离开的地方继续。
我能在这节 Vibe Coding 课中编写并运行代码吗？
能。每节 Vibe Coding 课都包含内置代码编辑器，你可以在浏览器中直接编写并运行真实代码，并获得即时 AI 反馈 — 无需本地设置。