Browse

All Challenges

13 challenges across 3 categories

Red Button: Minimal Prompt, Maximum Polish

Generate a beautiful, accessible red button using the fewest prompt characters possible.

prompt-engineering

beginner-friendly

Secure Login Form: Auth UI with Full Validation

Prompt the AI to create a complete login form with validation and security best practices.

state-management

Hardcoded Secrets: API Credential Exposure & Env Var Remediation

Find and fix hardcoded API keys and secrets in this AI-generated Express.js server.

environment-variables

secrets-management

SQL Injection: Parameterized Query Defense Against OWASP A03

Fix SQL injection vulnerabilities in this database query handler by implementing parameterized queries.

input-validation

parameterized-queries

XSS Attack Surface: React DOM Sanitization & dangerouslySetInnerHTML Audit

Find and fix cross-site scripting (XSS) vulnerabilities in this React comment system.

cross-site-scripting

Python → Rust: Idiomatic FizzBuzz with Match & Iterators

Convert this Python FizzBuzz implementation to idiomatic Rust with identical output.

language-conversion

pattern-matching

systems-programming

Todo App: CRUD State Management via Prompt Engineering

Generate a fully functional Todo app with add, toggle, and delete using the fewest characters.

state-management

component-design

React → Vue 3: Composition API Migration with ref, computed & watch

Convert this React counter component to Vue 3 Composition API with identical behavior.

framework-conversion

composition-api

state-management

template-syntax

Capability-Gated Plugin Sandbox

Fix the security bugs in this plugin sandbox — a shallow Object.freeze, toString spoofing, and missing call-time enforcement let untrusted plugins escape their permission boundaries.

least-privilege

Live Module Graph: Hot-Reload Engine

Fix two critical bugs in this incremental hot-reload dependency graph: a missing removeEdge causes phantom dirty cascades, and the cycle-detection DFS can infinite-loop.

dependency-analysis

cycle-detection

Deterministic Event Loop Simulator

Fix the microtask starvation bug in this virtual event loop — the tick loop executes one microtask per macrotask instead of draining the entire microtask queue first, violating the ES spec.

AST Codemod Engine: Safe Symbol Rename

Implement a codemod engine that safely renames JavaScript symbols using AST analysis — fixing var-hoisting scope bugs and adding conflict detection before applying patches.

static-analysis

Source Map Compiler: VLQ Sign Bit Bug

Fix the VLQ encoder's sign-bit bug — it uses two's complement instead of the VLQ sign encoding, causing all negative position deltas in source maps to decode to wrong values.