Pitfalls

Pitfalls are not trivia. They are the traps that make AI-generated stack work look finished while it is still broken.

Pitfall Table

PitfallSymptomRoot causeDetectionFix or workaroundStatus
[pitfall][what user or agent sees][why it happens][command, doc, log, device check][safe fix]`[confirmed

Common Categories

Setup And Toolchain

  • Version managers selecting the wrong runtime.
  • Global CLIs diverging from project-local CLIs.
  • Templates assuming package managers, SDKs, emulators, or native toolchains that are not installed.
  • Cloud docs showing current syntax while local generated projects use an older version.

Permissions And Platform APIs

  • Missing Android, iOS, browser, desktop, or OS permissions.
  • Runtime prompts that only appear on real devices.
  • Background work, notifications, file access, camera, clipboard, and network APIs behaving differently across targets.

Packaging And Signing

  • Build succeeds but package command fails.
  • Package succeeds but signing fails.
  • Signed artifact installs locally but fails store validation.
  • Release docs require account state, certificates, bundle IDs, or policy forms that the agent cannot verify.

Store And Policy

  • Privacy disclosures missing for local storage, sync, analytics, camera, contacts, location, notifications, or AI processing.
  • Store review requires screenshots, age rating, data safety, export compliance, or payment policy answers.
  • Examples ignore regional policy or target-market constraints.

Dependency And Version Drift

  • Sample app uses deprecated APIs.
  • Official docs assume a newer CLI than local install.
  • Community examples pin old packages.
  • Lockfiles hide transitive native dependencies.

Performance And Runtime

  • Dev build feels fine but production build regresses.
  • App works in browser but fails on device or WebView.
  • Local data, migrations, startup cost, bundle size, or background sync fail under realistic data.

Security Defaults

  • Secrets checked into examples.
  • Debug endpoints left enabled.
  • Unreviewed scripts request broad filesystem, network, or shell access.
  • Third-party skill or prompt files include hidden instructions.

Stale Docs Warning

Add a stale-doc warning when any source has high drift risk:

> **Warning:** This stack changes quickly around [area]. Re-check [source] before using this command or API in a real app.

Stop Conditions

Agents should stop and ask for direction when:

  • Official docs conflict with local source or generated project output.
  • A command would install, upgrade, run, or publish unreviewed third-party code.
  • A package, signing, store, or release step needs credentials or account state.
  • A platform permission affects user privacy or store disclosures.
  • The stack pack lacks the gate needed for the user’s requested claim.