I’d also consider writing a script with AI, which you don’t understand, as vibe coding. Basically if you wouldn’t be able to do it on your own it’s vibe coding.

In the US maybe but not in Germany, Austria and probably most countries in Europe.

I’m not a lawyer but I suppose it would depend on the ToS and if the user agrees to the recording and processing. But if it allows the extraction of the real identity of the user it’s probably a GDPR issue.