Introduction

  • TL;DR: vibe coding은 자연어로 “빠르게 만들고 돌리는” 방식이라 쓰기보다 검증에 부담이 쏠립니다. ADHD는 “집중력 문제”만이 아니라 성인에서 집행 기능(계획·조직화·시간관리) 부담으로 나타납니다. “Accept All”에 의존하면 특히 보안 리스크가 커지므로 테스트·리뷰·스캔 같은 하드 게이트가 필요합니다. (karpathy)

What vibe coding is

vibe coding is a workflow where you describe intent in plain language and iterate based on run results, often with minimal code reading. (X) Why it matters: speed without verification becomes “verification debt,” which is worse than normal tech debt. (NIST SP 800-218)

What ADHD is (and what matters at work)

Adult ADHD symptoms often persist as inattention plus real-world impairments; executive-function support (organization, planning, time management) is a common treatment/management focus. (NIMH) Why it matters: vibe coding increases the need for consistent verification routines—exactly the kind of routine that collapses when it’s not externalized. (AAFP)

The “connection”: workflow interaction, not medical causality

Current research around vibe coding focuses on learning, cognitive offloading, and software quality/security—not clinical ADHD outcomes. (arXiv) Why it matters: treat this as an engineering problem: design guardrails and your outcome becomes predictable. (NIST SP 800-218)

Where vibe coding helps vs hurts

  • Helps: throwaway prototypes, internal tools, tasks with clear automated tests. (karpathy)
  • Hurts: production auth/crypto, regulated systems, long-lived codebases without strong review/testing culture. (arXiv) Why it matters: scope control is the cheapest risk reducer. (NIST SP 800-218)

Guardrails you can copy

  • Enforce: tests + code review + security scans before merge (SSDF-aligned). (NIST SP 800-218)
  • Split: prototyping repo vs production repo.
  • Keep PRs small; require “why this design” in PR description. Why it matters: automation beats willpower. (NIST SP 800-218)

Conclusion

  • vibe coding optimizes for speed; engineering must optimize for verification. (karpathy)
  • Adult ADHD often maps to executive-function load, so external structure helps. (AAFP)
  • If you want the upside, hard-gate the downside with CI rules (tests/reviews/scans). (NIST SP 800-218)

Summary

  • vibe coding is powerful for prototyping but risky for production without gates.
  • ADHD relevance is about workflow friction and verification routines, not diagnosis.
  • CI-enforced review/testing/security scanning is the practical fix.

#vibecoding #aicoding #securecoding #cicd #codereview #adhd #executivefunction #nistsdf

References

  • (There’s a new kind of coding I call “vibe coding”… | X (Andrej Karpathy), 2025-02-03)[https://x.com/karpathy/status/1886192184808149383?lang=en]
  • (Vibe coding MenuGen | karpathy.bearblog.dev, 2025-04-27)[https://karpathy.bearblog.dev/vibe-coding-menugen/]
  • (vibe coding (Slang & Trending) | Merriam-Webster, 2025-03-08)[https://www.merriam-webster.com/slang/vibe-coding]
  • (Attention-Deficit/Hyperactivity Disorder (ADHD) | NIMH, access 2026-02-04)[https://www.nimh.nih.gov/health/topics/attention-deficit-hyperactivity-disorder-adhd]
  • (ADHD: Signs and Symptoms | CDC, 2024-05-16)[https://www.cdc.gov/adhd/signs-symptoms/index.html]
  • (Adult ADHD: Treatment and Management | AAFP, 2026-01)[https://www.aafp.org/family-physician/patient-care/prevention-wellness/emotional-wellbeing/adhd-toolkit/treatment-and-management.html]
  • (ADHD in Adults | American Psychiatric Association, access 2026-02-04)[https://www.psychiatry.org/patients-families/adhd/adhd-in-adults]
  • (Do Users Write More Insecure Code with AI Assistants? | arXiv, 2023-12-18)[https://arxiv.org/html/2211.03622v3]
  • (Secure Software Development Framework (SSDF) Version 1.1 | NIST, 2022-02)[https://nvlpubs.nist.gov/nistpubs/specialpublications/nist.sp.800-218.pdf]
  • (Quantifying Cognitive Offloading in AI Programming | arXiv, 2026-01)[https://arxiv.org/html/2601.02410v1]
  • (Andrej Karpathy warns about skill atrophy from AI coding tools | Business Insider, 2026-01)[https://www.businessinsider.com/andrej-karpathy-claude-code-manual-skills-atrophy-software-engineering-tesla-2026-1]
  • (AI coding security risks and mitigations | IT Pro, 날짜 미상)[https://www.itpro.com/technology/artificial-intelligence/vibe-coding-security-risks-how-to-mitigate]
  • (Researchers uncover critical AI IDE flaws exposing data theft and RCE | Tom’s Hardware, 날짜 미상)[https://www.tomshardware.com/tech-industry/cyber-security/researchers-uncover-critical-ai-ide-flaws-exposing-developers-to-data-theft-and-rce]
  • (Linus Torvalds on vibe coding cautions | TechRadar, 날짜 미상)[https://www.techradar.com/pro/linux-godfather-linus-torvald-says-hes-fine-with-vibe-coding-just-dont-use-it-on-anything-important]
  • (Vibe coding coverage | Financial Times, 날짜 미상)[https://www.ft.com/content/f4f3def2-2858-4239-a5ef-a92645577145]