The Shadow Software Crisis: How AI “Vibe Coding” Could End Excel’s Reign in City Halls

It’s a scene familiar to every city office: a new email arrives, someone copies and pastes data into an aging software system, then reaches for the ever-present Excel spreadsheet to check a rule the system can’t handle. Another spreadsheet for lists, another for cross-checks, sticky notes for missing fields, and-somehow-the wheels keep turning. But not thanks to digital tools; often, despite them. Now, a new wave of AI-powered “vibe coding” threatens to upend this shadowy underworld of workaround software, and the stakes are higher than most realize.

Inside the Shadow IT Economy

Public sector offices are awash with “shadow software”-unofficial Excel files, macros, and ad hoc scripts that fill gaps left by rigid, expensive official systems. These workarounds are not just a habit; they’re a survival mechanism, compensating for the slow, costly process of updating government IT. But under the hood, this creates an unsupervised ecosystem lacking version control, audits, and real security-an operational risk hiding in plain sight.

Vibe Coding: The AI-Driven Disruption

Enter “vibe coding”: AI tools like Claude Code now let employees describe their real-world problems in plain language, and instantly generate working software solutions-no deep coding skills required. These aren’t just tech toys; they’re powerful enablers that turn daily frustrations into micro-apps, from data validators to automated dashboards, that can be quickly tested, improved, and shared.

From Workarounds to Shared Solutions

The real revolution lies in collaboration. By storing these micro-solutions on platforms like GitHub, the public sector can build a living, open repository of code-publicly owned, instantly reusable, and continually refined. The days of each city reinventing the wheel (and paying for it) could be over. Software vendors would need to pivot: less selling closed boxes, more supporting open platforms and providing expertise.

The Governance Challenge

But this newfound agility comes with risks. Without strong oversight-security audits, versioning, proper access controls-AI-generated scripts could become a playground for errors or data breaches. A new digital governance layer is essential, ensuring that the power to create is matched by responsibility and standards.

Conclusion: From Ghost Code to Public Asset

The question isn’t whether public employees can build software-they already do, under Excel’s shadow. The real test is whether we’ll bring this silent competence into the open, with rules, tools, and collective ownership. If AI-powered vibe coding becomes the norm, it could transform not just municipal IT, but the very mindset of government: from passive users to active designers of public service. The radical move isn’t writing code-it’s daring to imagine a public sector that actually keeps pace with its own needs.

WIKICROOK

• Shadow Software: Shadow software are unsanctioned tools or apps used by staff to bypass official IT systems, often increasing security and compliance risks.
• Vibe Coding: Vibe Coding is the rapid generation of code using AI tools, often sacrificing quality and security for speed and volume.
• GitHub: GitHub is an online platform for storing, managing, and collaborating on code, widely used by individuals and companies for software projects.
• Version Control: Version control tracks changes to code or files, helping teams manage revisions, prevent errors, and recover data, which is vital for cybersecurity.
• Micro: A 'micro' is a tiny, rapid transaction with minimal tokens, often used to exploit code precision errors or for legitimate micropayments.