惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

爱范儿
爱范儿
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
G
GRAHAM CLULEY
www.infosecurity-magazine.com
www.infosecurity-magazine.com
V2EX - 技术
V2EX - 技术
The Last Watchdog
The Last Watchdog
S
Secure Thoughts
Webroot Blog
Webroot Blog
PCI Perspectives
PCI Perspectives
L
LINUX DO - 最新话题
Hacker News: Ask HN
Hacker News: Ask HN
N
News and Events Feed by Topic
H
Heimdal Security Blog
H
Help Net Security
T
The Blog of Author Tim Ferriss
P
Proofpoint News Feed
The GitHub Blog
The GitHub Blog
Jina AI
Jina AI
Recent Commits to openclaw:main
Recent Commits to openclaw:main
F
Full Disclosure
小众软件
小众软件
S
Securelist
罗磊的独立博客
NISL@THU
NISL@THU
D
Darknet – Hacking Tools, Hacker News & Cyber Security
C
Cisco Blogs
云风的 BLOG
云风的 BLOG
C
CERT Recently Published Vulnerability Notes
Cisco Talos Blog
Cisco Talos Blog
Know Your Adversary
Know Your Adversary
S
Schneier on Security
D
DataBreaches.Net
M
MIT News - Artificial intelligence
V
Vulnerabilities – Threatpost
N
News and Events Feed by Topic
有赞技术团队
有赞技术团队
F
Fortinet All Blogs
T
Tenable Blog
The Register - Security
The Register - Security
C
Check Point Blog
AWS News Blog
AWS News Blog
Cloudbric
Cloudbric
C
CXSECURITY Database RSS Feed - CXSecurity.com
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
C
Cyber Attacks, Cyber Crime and Cyber Security
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
Google Online Security Blog
Google Online Security Blog
博客园 - 叶小钗
Hacker News - Newest:
Hacker News - Newest: "LLM"
博客园 - 司徒正美

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant Common SOC 2 Failures (Real World) Stop Vibe-Checking Your AI App: A Practical Guide to Evals How to Use SonarQube and SonarScanner Locally to Level Up Your Code Quality Your Next To-Do App Is Dead — I Replaced Mine with an OpenClaw AI Sign a Nostr event in 60 lines of Python using coincurve — no nostr-sdk, no nbxplorer, no rust toolchain ITGC Audit Explained Like You’re in Big 4 Patch Tuesday abril 2026: Microsoft parcha 163 vulnerabilidades y un zero-day en SharePoint Stop scraping everything: a better way to track competitor price changes Listing on MCPize + the Official MCP Registry while routing payments OUTSIDE the marketplace — how I kept 100% of my x402 revenue Building an AI-Powered Risk Intelligence System Using Serverless Architecture Why We Ripped Function Overloading Out of Our AI Toolchain Testing AI-Generated Code: How to Actually Know If It Works SaaS Churn Is Killing Your Business. Here Is What to Do About It (Without a Support Team) The Speed of AI Is No Longer Linear - And Self-Improving Models Are Why How to Implement RBAC for MCP Tools: A Practical Guide for Engineering Teams From Standard Quote to Persuasive Proposal: AI Automation for Arborists I built a CLI that scaffolds complete multi-tenant SaaS apps Axios CVE-2025–62718: The Silent SSRF Bug That Could Be Hiding in Your Node.js App Right Now The dashboard that ended our friendship Data Pipelines Explained Simply (and How to Build Them with Python) The Hidden Cost of AI Systems Nobody Talks About. undefined vs undeclared, and how typeof behaves Switching from file-based jobs to NATS/Kafka in Rust without changing code io_uring Adventures: Rust Servers That Love Syscalls Why Agentic AI is Killing the Traditional Database The POUR principles of web accessibility for developers and designers Quantum Neural Network 3D — A Deep Dive into Interactive WebGL Visualization How To Install Caveman In Codex On macOS And Windows Automation Pipeline Reliability: Why Your Workflow Breaks When Nobody Is Watching I Built an 'Open World' AI Coding Agent — It Works From ANY Folder From Freelancing to Product: A Tech Service Company's SaaS Transformation China's AI Giants: Adding Tencent Hunyuan & ByteDance Doubao to AI University (74 Providers) On the Vibe Coders and Their Lies clerk: Auto-Summarize Your Claude Code Sessions AI Weekly — 2026/04/10–04/17 | The Model Lockdown Is Here, but the Toolchain Is the Real Battleground AI 週報 — 2026/04/10–2026/04/17 模型封鎖潮來了,但工具鏈才是真戰場 Maybe this is how Open-Source apps are born... 🚀 Fine-Tune LLMs with LoRA and QLoRA: 2026 Guide tRPC v11 + Next.js App Router: End-to-End Type Safety Without the Boilerplate ShadCN UI in 2026: Why I Stopped Installing Component Libraries and Started Owning My Components SaaS Billing in React Server Components: Stripe + Supabase Without a Single `useEffect` Join our DEV Weekend Challenge — $1,000 in Prizes Across TEN winners! Submissions Due April 20 at 6:59 AM UTC. Implementing FSRS Spaced Repetition in Flutter + Supabase — Adding Memory Science to an AI Learning App "I Texted My Localhost From the Train — Claude Code Fixed the Bug Before I Got Home" I Built a Sales Prep AI and It Went Deeper Than Expected Design to Code #2: One JSON, Eleven Outputs Solving the 100M-Row Problem: A Summary Table Pattern for High-Volume Push Notification Logs Flutter Web With Wasm: What Actually Changes For Developers I Built 50 Royalty-Free Soundtracks for My Side Project in a Weekend Using AI Music Generation The Vibe Coding Security Checklist: 7 Things to Check Before You Ship Stop Letting Googlebot Guess Fix Your React App's SEO Right Desconstruindo o Streaming do LinkedIn: Como Criar um Engine de Extração de Vídeo de Alta Performance com HLS e FFmpeg (EDA Part-1) EDA (Exploratory Data Analysis) Explained With Real Life — Why Looking at Your Data Is the Most Important Step in Machine Learning Brand Relationship Management at Scale: Our 4-Touch Outreach System for 200+ Brands Why String.fromEnvironment() Might Return an Empty String in Dart JGuardrails 1.0.0 — Hardening Java LLM Apps Against Jailbreaks, Toxicity, and Prompt Injection Plan and Schedule a Full Week of Threads Content From One Claude Conversation Coding Cat Oran Ep3, Five Tables Changed Everything Updated: BFF Pattern I'm done watching freelancers get buried by 200 proposals. So I'm building the alternative. This is my first post BFS Algorithm in Java Step by Step Tutorial with Examples Tracking LLM Pricing Monthly: An Open Dataset for 22 AI Models How We Measure Content ROI on a Comparison Site: Revenue Attribution Without Perfect Data Introducing Nova AI Ops: The AI-Native Operating System for SRE Teams I built a free desktop video downloader for Windows — Grabbit How Talkie OCR Helps Vision-Impaired & Dyslexic Users Read the World Around Them VRCFaceTracking安装和iPhone面捕配置教程,有bug Even CrowdStrike Can't See Your Agents The Automation Gold Rush: What n8n Workflows and Claude Are Opening Up for Developers Right Now
25 Prompts For Planning Your First Website Or Mobile App With AI In 2026
Marcus Kim · 2026-06-28 · via DEV Community

The most dangerous beginner prompt is also the most tempting one:

Build me an app for [idea].

It feels direct. It feels efficient. It feels like the whole point of using AI.

But if you are building your first website or mobile app with AI, that prompt is usually too empty. It asks the tool to make product decisions, architecture decisions, scope decisions, design decisions, data decisions, and launch decisions before you have told it what kind of project you are actually trying to make.

That is how a small idea turns into a pretend platform.

You wanted a simple app for tracking workout routines. AI gives you accounts, subscriptions, social features, leaderboards, wearable integrations, dashboards, an admin panel, and a database schema that looks like it should have a board of directors.

The answer looks impressive.

That does not mean it is a good first build.

Before I let AI write serious code, I want it to help me do three boring but useful things:

  1. Make the idea smaller.
  2. Name the one workflow version one must complete.
  3. Define what "done" means before the project starts growing extra heads.

That is the real job of planning prompts. They are not there to make you feel like a prompt wizard. They are there to keep the project from becoming harder than your current skill level, attention span, and actual use case can support.

If you want a ready-made version of this planning flow, I made a free AI App Builder Starter Prompts pack for beginners who have an app idea but do not know what to type first:

https://marcusykim.gumroad.com/l/ai-app-builder-starter-prompts

Use the prompts below as a practical planning sequence. You do not need all 25 for every project, but if you are a beginner, running through them once will probably save you from a lot of fake progress.

How To Use These Prompts

Do not paste all 25 prompts at once.

That is how you turn AI into a very confident document blender.

Use them in passes:

  • First, pressure-test the idea.
  • Then define the user and workflow.
  • Then choose the platform and stack.
  • Then map the screens, data, and rules.
  • Then ask for a build plan, QA plan, and launch plan.

At each step, make the AI explain tradeoffs in plain English. If it uses a term you do not understand, stop and ask. If it proposes something too big, tell it to shrink the plan.

The goal is not to look technical.

The goal is to build a project you can actually finish.

1. The Rough Idea Prompt

Use this when your app idea still feels like a paragraph instead of a project.

I have a rough app idea: [describe the idea].

Help me turn this into a clearer app concept. Identify the likely user, the problem they have, the main workflow, and the smallest useful version one. Keep the explanation beginner-friendly and do not suggest advanced features yet.

The important phrase is "smallest useful version one."

Without that, AI often tries to describe the grown-up version of the product. You need the first useful slice, not the whole imaginary company.

2. The One User Prompt

Use this to avoid building for "everyone."

For this app idea, help me choose one specific first user. Give me three possible user types, explain which one is easiest to build for first, and recommend one user to target for version one.

"Everyone" is not a user. It is a fog machine.

You want one person you can picture. A student planning assignments. A musician saving song ideas. A freelancer tracking client demos. A gym owner managing class signups.

The more specific the first user is, the easier the app becomes to scope.

3. The One Workflow Prompt

This is one of the most important prompts in the whole list.

Define the one workflow version one of this app must complete from start to finish.

Use this format:
"Version one helps [one user] do [one job] from [starting point] to [finished result]."

Then list what is outside the scope for version one.

Your first app does not need ten workflows.

It needs one workflow that actually works.

4. The Too-Big Detector Prompt

Use this before AI starts flattering your idea into a monster.

Review this app idea as if you are trying to protect a beginner from overbuilding.

What parts are too big for version one?
What parts can wait?
What parts are probably unnecessary until real users ask for them?
Give me a smaller version I could realistically build first.

I like prompts that give AI a job besides "be helpful."

Here, the job is to protect the beginner from scope creep.

5. The Web Or Mobile Prompt

Use this when you do not know whether to start with a website, mobile app, or cross-platform build.

For this app idea, should a beginner build version one as a web app, native iOS app, native Android app, Expo app, Flutter app, or something else?

Compare the options using:
- difficulty
- speed to first version
- deployment complexity
- user expectations
- payment or account needs
- long-term tradeoffs

Then recommend one path for version one.

The point is not to find the "best" platform in the abstract.

The point is to pick the least confusing path for your first real version.

6. The Stack Explanation Prompt

Use this when AI throws tool names at you like confetti.

Recommend a beginner-friendly stack for this app and explain every part in plain English.

For each tool or service, tell me:
- what it does
- why this app needs it
- what could go wrong if I misunderstand it
- whether there is a simpler alternative for version one

If the AI cannot explain the stack clearly, you should not let it build the stack yet.

Confusion compounds. A tool you do not understand becomes a debugging problem later.

7. The No-New-Tools Prompt

Use this when AI keeps adding services because it can.

Simplify the stack. Assume I want the fewest tools possible for a working version one.

Remove any tool, service, framework, database, or integration that is not necessary for the first user workflow. Explain what we are giving up and why that tradeoff is acceptable for version one.

This is a good correction prompt when the plan starts sounding expensive, brittle, or too clever.

8. The Screen List Prompt

Use this before asking for UI code.

List the minimum screens this app needs for version one.

For each screen, include:
- screen name
- user's goal on that screen
- primary action
- data shown
- data entered
- where the user goes next

Do not include screens that are not needed for the one main workflow.

Screens are easier to reason about than vague features.

Once you can see the screens, you can start noticing whether the app is actually small.

9. The First Screen Prompt

Use this to avoid starting with a giant dashboard.

Which screen should I build first for this app, and why?

Choose the screen that teaches me the most about the core workflow. Explain what must work on that screen before I move on.

Beginners often start with the prettiest screen.

Sometimes that is fine. But usually, you want to start with the screen that proves the core action can work.

10. The Data Model Prompt

Use this when you need to know what information the app stores.

Create a simple data model for version one of this app.

Use beginner-friendly language. For each data object, explain:
- what it represents
- what fields it needs
- which fields are required
- which screen creates or edits it
- which screen displays it

Keep the model as small as possible.

Your backend is not a storage closet.

Do not let AI throw every possible field into the database just because the field might be useful someday.

11. The Data Privacy Prompt

Use this before you build accounts, profiles, uploads, or anything personal.

What sensitive or private data might this app handle?

List what data should be avoided in version one, what data must be protected, and what beginner-friendly design choices reduce privacy risk.
Do not give legal advice. Focus on practical product and engineering caution.

This prompt is not a substitute for real legal or security advice.

It is a sanity check. If your tiny first app suddenly needs sensitive data, you may need a smaller first version.

12. The Authentication Prompt

Use this before adding login.

Does version one of this app actually need user accounts?

Explain:
- what works without login
- what breaks without login
- the simplest acceptable account approach if login is necessary
- what should wait until after version one

Authentication is not just a button that says "Sign in."

It creates password resets, account states, private data rules, error states, permissions, and support problems. Sometimes you need it. Sometimes you are adding a bouncer before the room exists.

13. The Permissions Prompt

Use this for apps that need camera, microphone, files, location, contacts, notifications, or payments.

List every permission this app might request.

For each permission, explain:
- why the app might need it
- whether version one can avoid it
- what user trust issue it creates
- what fallback experience should exist if the user says no

Permissions are product decisions, not just technical switches.

If a user says no, your app still has to behave like it was designed by someone awake.

14. The Feature Priority Prompt

Use this when your feature list is getting noisy.

Here is my feature list: [paste list].

Sort these into:
1. Must exist for version one
2. Nice later
3. Probably a distraction

Explain each choice based on the one main user workflow.

The main workflow is your judge.

If a feature does not support that workflow, it probably should not be in version one.

15. The Acceptance Criteria Prompt

Use this to define "done."

Write acceptance criteria for version one of this app.

Use simple "done when" statements. Focus on what a user can successfully do, not on internal code tasks.
Include happy paths, empty states, common mistakes, and one or two failure cases.

Acceptance criteria are boring in the same way seatbelts are boring.

You notice them when you need them.

16. The Project Rulebook Prompt

Use this before the build starts.

Create a short project rulebook for this app.

Include:
- version one goal
- target user
- main workflow
- out-of-scope features
- stack decisions
- UI style rules
- data rules
- QA rules
- when to ask me before adding complexity

Write it so I can paste it into my AI coding tool as project context.

AI behaves better when the project has a source of truth.

The rulebook is how you stop re-explaining the app every fifteen minutes.

17. The Build Sequence Prompt

Use this when you are ready to turn the plan into tasks.

Turn this app plan into a beginner-friendly build sequence.

Break it into small milestones. Each milestone should produce something I can run, click, test, or inspect. Do not create a giant task list where nothing works until the end.

This matters because a beginner needs visible progress.

If the first seven tasks are invisible setup tasks, you will not know whether the app is real or just accumulating folders.

18. The First Milestone Prompt

Use this to start smaller than your ego wants.

Define the first milestone for this app.

It should be small enough to complete quickly and should prove one important part of the main workflow. Include what files or screens are likely involved, what I should test, and what not to touch yet.

Your first milestone is not "finish the app."

It is "prove one piece of the app is alive."

19. The UI Direction Prompt

Use this before AI designs a pile of generic cards.

Give me a simple UI direction for this app.

Describe the layout, navigation, visual hierarchy, and interaction style. Avoid nested cards and decorative clutter. Make the interface clear for the main workflow, and explain how the design helps the user know what to do next.

AI-generated UI often overuses boxes inside boxes inside boxes.

You can prevent some of that by telling it what clarity means before it starts drawing rectangles for a living.

20. The Empty State Prompt

Use this because every new app starts empty.

For each main screen, describe the empty state.

What does the user see before they have created anything?
What action should the empty state encourage?
What should the app avoid saying or showing?

Empty states are not filler.

They are the first version of onboarding.

21. The Error State Prompt

Use this before something breaks.

List the most likely beginner-level error states for this app.

For each one, explain:
- what went wrong
- what the user should see
- what the user can do next
- what the app should log or preserve

A project starts feeling real when it handles imperfect input, failed saves, missing data, bad network states, and user confusion.

22. The QA Checklist Prompt

Use this before trusting the app.

Create a QA checklist for version one of this app.

Organize it by workflow, screen, data, permissions, edge cases, mobile/desktop behavior, and deployment. Keep it practical enough that a beginner can run the checks manually.

AI can produce code faster than you can understand it.

That makes QA more important, not less.

23. The Bug Report Prompt

Use this when something fails and you do not know what to say.

Help me write a clear bug report for this issue:
[describe what happened]

Ask me for any missing details. Then produce a bug report with:
- expected behavior
- actual behavior
- steps to reproduce
- likely area of the app
- what evidence I should collect before asking AI to fix it

Bad bug prompts create random fixes.

Good bug prompts give the AI enough evidence to work like a teammate instead of guessing in a dark room.

24. The Deployment Plan Prompt

Use this before the app leaves your machine.

Create a beginner-friendly deployment plan for this app.

Explain:
- where this app should be deployed first
- what accounts or services I need
- what environment variables or secrets might exist
- what can go wrong during deployment
- how I can confirm the live app works

Deployment is where your app meets reality.

The earlier you understand that path, the less mysterious the project feels.

25. The Launch Readiness Prompt

Use this before you show the app to anyone.

Review this app as a version-one launch candidate.

Tell me:
- what must be fixed before anyone sees it
- what can be imperfect for a first version
- what I should test one more time
- what I should ask first users after they try it
- what I should not build until I get feedback

This prompt protects you from polishing the wrong thing.

The first launch is not a coronation. It is a learning event.

The Best Prompt Is Usually A Smaller Prompt

The pattern underneath all 25 prompts is simple:

Make AI explain the project before it builds the project.

That one habit changes the whole experience.

Instead of asking AI to invent a complete product from a vague sentence, you make it help you narrow the user, workflow, platform, stack, screens, data, edge cases, QA, and launch path.

That is how you stay in control.

You do not need to become a senior engineer before using AI to build your first app. But you do need to stop treating the AI like it can read your mind.

It cannot.

It can only work from the context you give it, the constraints you enforce, and the checks you run after it produces something.

If you want these ideas in a more guided sequence, the free AI App Builder Starter Prompts pack is built for exactly this first planning conversation:

https://marcusykim.gumroad.com/l/ai-app-builder-starter-prompts

The useful starting question is not:

Can AI build my app?

The better question is:

Can I describe the first useful version clearly enough that AI has something sane to build?

That is the whole game.

Final Takeaway

If you are a beginner, your first app should not prove that AI can generate a lot of code.

It should prove that one person can complete one useful workflow.

Start there.

Use prompts that make the project smaller, clearer, and easier to verify. Then build.

I made a free AI App Builder Starter Prompts pack for beginners who want to turn a rough app idea into a scoped first build with AI. You can get it here:

https://marcusykim.gumroad.com/l/ai-app-builder-starter-prompts

If you want the full build-along field manual behind the free prompts, AI App Builder From Zero walks through idea, scope, stack, prompting, QA, deployment, and launch:

https://marcusykim.gumroad.com/l/ai-app-builder-from-zero

You can also find me here:

Medium: https://medium.com/@marcusykim
DEV.to: https://dev.to/marcusykim
Website: https://marcusykim.com/blog/
X: https://x.com/marcusykim
LinkedIn: https://www.linkedin.com/in/marcusykim/