Zubair Lutfullah Kakakhel

I hacked my own Lovable app in 60 seconds.


2 flaws. Both super common in vibe coded apps.


One lets users bypass approval.
The other steals credentials.


I've got 20 security prompts I run before shipping.
Input validation. Auth. Permissions. The stuff Lovable's agent misses.


Want them?


Comment SECURE and I'll send the link

6 months ago | [YT] | 2

Zubair Lutfullah Kakakhel

I built my own personal marketing army.



5 Claude Code skills chained together:

- Fetch transcripts
- Draft intros
- Generate thumbnails
- Write LinkedIn posts
- Create tweets


One command. Full workflow.



The feature? Skills.

7 months ago | [YT] | 0

Zubair Lutfullah Kakakhel

Opus 4.5 is amazing!

But I'm more excited about Claude Code for Desktop!

What about you?

7 months ago | [YT] | 0

Zubair Lutfullah Kakakhel

Security audits cost $20K.



Most startups skip them.



Then ship vulnerabilities.



The security checklist most teams skip:



Authentication:
→ Sessions configured securely?
→ Tokens handled correctly?
→ Login/logout working properly?



Authorization:
→ Can users access only their data?
→ Ownership checks in place?
→ Admin routes protected?



Input Validation:
→ SQL injection prevented?
→ XSS attacks blocked?
→ All inputs sanitized?



Rate Limiting:
→ Endpoints protected from spam?
→ Brute force prevented?
→ Cost controls enabled?



Secret Management:
→ No keys in client code?
→ Environment variables secure?
→ API credentials protected?



That's just 5 categories. There are 15 more.



I built 20 specialized AI agents that catch these issues in 10 minutes. Costs $0 extra.



Took me months of learning to get here but you can grab these instantly for FREE



Video just dropped! (Includes a link to the Github repo)

7 months ago | [YT] | 4

Zubair Lutfullah Kakakhel

Should you migrate from NoCode to AI Code?

There's a 5-factor test we use to know when migration makes sense.

Made a full video covering it

Who's considering migration this year? 👇
https://youtu.be/IotMCZcLf3o

7 months ago | [YT] | 1

Zubair Lutfullah Kakakhel

Windsurf just solved the biggest vibe coding problem with "codemaps"

But what if you're using Claude Code or Cursor?

I figured out how to get the same functionality with 2 free tools:
- dependency-cruiser (text maps for AI)
- crabviz (visual maps for you)

They help you understand your AI-generated codebase so you stop feeling lost when making changes.

Just dropped a 6 min tutorial going over the setup.

Now for the uncomfortable question..

Do you actually know what's going on in your codebase, or are you just hoping for the best?

7 months ago | [YT] | 1

Zubair Lutfullah Kakakhel

What I built:

• Add listing button with modal
• Edit pencil icon (reuses same modal)
• Delete with confirmation dialog
• Auto-refresh after changes
• Loading states for better UX


In under 20 minutes.

Video Walkthrough dropped today!

7 months ago | [YT] | 5

Zubair Lutfullah Kakakhel

Poll: What's your #1 fear about transitioning from Nocode to code?

"I don't know how people did this before AI."

I say that every time I watch AI write code in 15 minutes that would take me 2 hours in Bubble.


We're now migrating live apps to Next.js (1000s of users)


The scary part wasn't the code.

It was realizing how similar the patterns are:


Bubble's "Do a search for" = One line of SQL
"Log the user in" = signInWithPassword()
Repeating Group = .map() function
Privacy rules = RLS policies

You're not starting from zero.
You're translating what you already know.

7 months ago | [YT] | 0

Zubair Lutfullah Kakakhel

NoCode developers who ignore AI code will get left behind.

We're migrating 3 Bubble apps with thousands of users to Next.js and Supabase

It's easier than you'd think.

Here is a simple translation

Bubble's Data Tab → Supabase
• User type → Auth table
• Data types → Tables
• Privacy rules → RLS policies
• File manager → Storage buckets
• Option sets → Static Data Tables

Displaying data in Next.js is exactly like dragging a repeating group in Bubble.

The patterns are identical:
• Drag repeating group → Install table component
• "Do a search for" → Fetch query
• Current cell → Table cell mapping

The only difference?

Instead of dragging & clicking around, you tell AI to install a component.
Instead of privacy rules, you set the Row level security.

Same mental model. Different interface.

NoCode developers aren't "non-technical."
They understand data modeling, business logic, and user flows better than most coders.

What's the biggest roadblock you are facing in making this transition?

8 months ago (edited) | [YT] | 4

Zubair Lutfullah Kakakhel

2 year old Bubble client fired us.


He rebuilt his app using AI (0 coding experience).


And it was the best thing that ever happened to our agency.

Here's the full story...

8 months ago | [YT] | 4