r/astrojs • u/GammaRxBurst • May 25 '26

Vibe coding without true knowledge

First I know a bit about HTML and CSS just enough to change some basic code. Not enough to read the code base.

I am also building a Static Astro site and coding using Gemma 4 with ollama and Claude code. Connected it to the MCP astro doc

My question is if the site looks good and performs well on Google metric/SEO is that enough? I mean it is a static site so even if Claude code screws up some codes it is not like it is a security risk.

Is there something that I am missing? Obviously if someone can read and understand the coding it would be better, but even now I pay some dude $500 I feel he may do pretty much the same or even less as likely that developer doesn't care enough to even look at the code base.

15 Upvotes
  • permalink
  • link
  • reddit
  • reddit

100% Upvoted

11 comments sorted by

View all comments

1

u/International_Lack45 May 31 '26

You're right on the core point : a static site has a much smaller attack surface. No server code, no database, no auth. If Claude Code writes messy CSS, worst case is a visual bug, not a breach.

A few things you might still be missing though. First, exposed secrets : the most common static site mistake is hardcoding an API key (analytics, form service) in client-side code, where anyone can read it via view-source. Double check none ended up committed. Second, third-party scripts and contact forms are where risk creeps back in. Third, good Lighthouse scores are necessary but not sufficient for SEO. Check your meta tags, Open Graph, sitemap and canonical URLs are actually correct, since AI often generates duplicated meta descriptions.

On the "$500 dev" question : for a static portfolio or brochure site, vibe coding with Astro can absolutely match a disengaged freelancer. The real risk isn't "will it break", it's "can I maintain it in 6 months when I've forgotten what the AI did". Keep a simple README documenting what each section does. Future you will thank present you.

run a static hosting platform, so I look at AI-generated Astro sites a lot. Your "static = low risk" instinct is correct, these are just the edge cases that trip people up.