Subscribe
Share
Share
Embed
The WP Minute brings you news about WordPress in under 5 minutes -- every week! Follow The WP Minute for the WordPress headlines before you get lost in the headlines. Hosted by Matt Medeiros, host of The Matt Report podcast.
Eric Karkovack (00:00)
Hi everyone and welcome to the WP Minute. I'm Eric Karkovack. Today's episode features a segment from our August 2026 member meetup, where we discuss lessons learned from vibe coding plugins. GridPane's Patrick Gallagher joined us to share tips for ensuring the quality and security of AI-generated apps. GridPane is a pillar sponsor of the WP Minute. Now you can catch the entire episode over on our WP Minute Plus channel.
Visit the WP Minute.com for all the details.
Eric Karkovack (00:33)
Yeah, how how have you kind of navigated that in just sort of verifying what the model's doing and so that it's something that you know you can safely use and and maybe have other people use?
Patrick Gallagher (00:47)
Yeah. So so it's very good question. So the the short answer to that is the or the the answer that's most useful to every one, I would say, is you should have two or three or four paid accounts with all the different providers, all the different models. Yeah. And what you wanna be doing is you wanna be basic red teaming. Whatever code you create.
You want, you know, let's say you build it in anthropic and Claude, you build version one inside of Claude. You then would want to have OpenAI 5.6, CPT 5.6 SAL basically sanity checking that code, right? And then you could have Grock 4.6 also, you know, red teaming that code and basically creating iterations and refining and refining and refining. but then you know, unfortunately.
the the the sad fact at the end of the day is it still just comes back to you need to have a human being in the loop that actually knows whether or not this is shit. Right? Whether this is brilliant or not. Yeah. Yeah. and and so a a hyper specific example of this is I've been working on something for about the last 18 months.
that's way off in the weeds that I I don't actually care sharing it. Yeah. So so if you are a hosting company, for example, and you have really big WordPress websites that have millions of orders in the database, and you need to move that website from point A to point B, one of the things that you might end up doing is a search and replace in the database to change the URL.
Okay. Very straightforward. Yeah. most people just use a plugin. Some people use WPCLI. Yeah. and you know, some some people just use the tool right within their hosting platform, right? but what I've been working on, again for about 18 months, is I just keep taking the same work that I started after O One Pro. It was actually O One Pro was the first one.
that was able to advance this idea for me. that version of that code that I built in December of twenty twenty four, every new model release, I have it test that code and make it better and make it better and make it better. And about three months ago, I finally handed it off to my CTO and he then made it in order of magnitude better than what I had made because he had ideas around what we could do with with making it better.
Right. And and ultimately, like I had gotten the code so good that it was like I I was convinced there was no no more room to improve it. Right. And I had taken something that in a very large database, a a search and replace could take twenty-four hours. Literally 24 hours. And you don't even know if it's working. Right. Like you could be 23 hours and 59 minutes in and not know how far along you are.
Right. Not know that you're even that you're that close to the diamond in the mine. Right. And we took this twenty-four hour task and and I took it down to about an hour. And then he took it down to 10 minutes. And then I had an idea that took it to 10 seconds. And so now we've taken this work that's real, like it's a real problem. You can't if you go to any host anywhere, they'll go, shit, I'll see you in 24 hours. That's how long that's gonna take.
And now we've compressed it down into literal seconds, like real time. And so I guess the the long story long answer to your question is for stuff that's really important, at the end of the day, you need to have an actual intelligent, actual intelligent human being in the loop. and then you still need three different versions of the AI, right?