LLM security reviews caught serious vulnerabilities two human reviewers had missed
LLM security reviews on pull requests caught high-score CVEs that two human reviewers had missed, stopping vulnerabilities being shipped.
A random mix from the whole library. Shuffle for a new set.
Work
Jobs, side gigs and small business · 1,668 ideasHVAC owner runs 27 agents, and only three emails may send themselves
An HVAC company owner who runs several small businesses counted 27 active AI agents and 36 routines, 26 of them scheduled, working across his companies: pulling statements, filing invoices, updating sales and cost sheets, flagging overdue maintenance and tracking renewal dates. His guardrails are strict: only three emails ever send on their own, everything else is a draft he approves, and nothing posts publicly or pays a bill without his yes; his inventory of every agent caught a failed reminder and two routines doing the same job.
Work as the virtual assistant for my cleaning business
For a cleaning business, the AI manages contacts, drafts client messages, chases reviews and maintains the CRM, holding every outbound message for approval before it sends.
A WebForms app was ported to Blazor in about 48 hours for about 150 dollars of tokens
Ported a legacy .NET WebForms app to Blazor with GPT-5.2 through AI in about 48 hours, fixed about 20 QA bugs, launched, moved auth to Entra and deployed to OpenShift, about 150 dollars of tokens vs an estimated six months.
$150
A well-meaning automation nearly corrupted a spreadsheet
The review's lede lists 'one spreadsheet almost corrupted by a well-meaning automation' among the two-week test's incidents: three conference rooms booked, inbox triaged, and one spreadsheet nearly corrupted by an automation acting on her data.
This only partly worked. Worth knowing before you try it.
An LLM keeps the index of his browsing archive tidy for his writing
LLM maintains the taxonomy and index for his automatically collected browsing archive in an Obsidian vault, used for his writing.
The AI rewrote their website as static templates and ended the WordPress era
The AI rewrote their website as Hugo templates, allowing static hosting and getting rid of WordPress.
My agent fixed my signup tracking. The new subscribers were bots.
Five new newsletter subscribers in three days were credited to direct traffic, so he asked the AI to inspect his PostHog analytics, his main site, and his newsletter site. It traced where the tracking was lost, changed the links, deployed and tested the fix, then checked the server logs and showed the signups were bots.
AI unblocked his compiler and left a code generator 5 times faster than his own
AI help unblocked his language compiler at codegen, produced a faster and better code generator than he could, and made the type checker about 5 times faster.
The AI burned thousands of my credits troubleshooting my mobile app, and its authenticated features still do not work
A user spent thousands of the AI credits and cash building a mobile app that reached TestFlight, but authenticated features stayed broken amid backend deployment, authentication, EAS/Expo and custom-domain failures. Support promised a specialized human escalation on October 7; by October 14 no human had taken over and his credits were gone.
This one went wrong. See what happened before you try it.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.