AI Code Review on a Vibe-coded Production App: What Qodo Found That I couldn’t See

Short summary

Author used Qodo to AI-review code in a production app built entirely through prompting, and it caught critical vulnerabilities his manual review missed—reverse tabnabbing, broken sitemap routes, and dependency conflicts. Qodo's codebase-context awareness (cross-referencing files, not just diffs) reveals why AI code generation and AI code review are different jobs.

• •Qodo caught reverse tabnabbing (missing rel="noopener noreferrer") that AI-generated UI consistently omits
• •Identified broken /blog sitemap route by cross-referencing routing files, not reading the diff in isolation
• •Demonstrated the critical distinction: AI tools generate code fast, but review tools ensure it's safe and production-ready

Generated with AI, which can make mistakes.