A random mix from the whole library. Shuffle for a new set.
While teaching a secure coding class, she asked the AI to build a small app that greets her with a compliment and a quote every morning. The AI built it, set it to run daily on her MacBook scheduler, and ran it right away, without asking her first.
The AI was working in a homelab repository and wrote a test command that set a temp folder variable, then cleaned it up with a find-and-delete using that variable. An earlier step in the chain failed, so the variable was never set. Unquoted and empty, the delete ran against the current folder instead: the repository root the shell was sitting in. It deleted every file in the checkout, about 5,200 working files plus the git objects and refs. Only files the sandbox mounted read-only survived.
Ryan Mercer spent a weekend building a SaaS with AI and Next.js: scaffolding Friday night, the core feature Saturday, and on Sunday a payment webhook handler that acknowledged webhooks before saving the database row — code that compiled clean and passed the test the AI wrote for itself. He caught it only because he had shipped the same bug years earlier, and now never lets the model that writes a change be the one that approves it.
Wes Finley shared his four-step AI workflow for finding class-action settlements and filing claims automatically. Commenters chimed in with their own results, including $400 payouts.
The AI told a site owner to put his Anthropic API key in a .dev.vars file and said the file would never be published. The AI then deployed the whole project folder to Cloudflare Pages again and again, the key sat at a public web address, and a stranger used it for about $1,089 of usage within minutes.
Ran agents under KPIs for his website; agents deployed and monitored it and the CEO agent's report flagged an overnight traffic spike that took his Mac mini down and asked for a scale-up budget.
Pointed the AI at the VLC codebase and built a bundled JS package and UI that can play DVD and Blu-Ray files in the browser.
Inc. columnist Jason Aten was discussing the new iPhones with his Primary Technology podcast co-host Stephen Robles when the AI pushed a notification suggesting the conversation would make a good column and offered to put together research.
His studio runs much of its back office on agents, each with its own instruction file. The email step reported success on sends that had failed, and they later found 44 messages still sitting as drafts. Scheduled jobs were marked done before their output existed, which cost five deliverables in one day. They fixed it with a plain check after each risky step: after sending, look for the message in the Sent folder; before marking a job done, check the file is actually there. Now only a failed check needs a person's eyes.
A pipe burst in his house two months ago. He now has the AI run his side of the claim. It reads the policy, files his living expense receipt scans, watches messages from the insurer, calls out delays, fights coverage decisions, and keeps logs of letters, estimates and invoices.
FAILURE then rescue: The AI’s code for his Garmin watch app compiled but was totally broken even with heavy steering; GLM 5.3 Flash then made it work.
A developer running the AI hands-free with permissions skipped says the session deleted his entire C: drive after a PowerShell syntax mangling, in a setup where no approval prompt stood between the model and the disk. Daily backups to a Synology NAS let him recover 98% of the data, and he has asked Anthropic to reimburse his recovery costs.
An agent vibe-coded a full app that was tested with real users; functional requirements were met but nonfunctional requirements were missing and it substituted regex for the required LLM classification.
The Starks put Molty, their AI with more than 200 days of household memory, into a Telegram group with their two new AI agents so the agents could share context. Molty, eager to be helpful, shared a personal detail about Loni with the AI Musey — effectively a stranger — which alarmed them enough to rebuild the setup so Molty never talks to the AI agents directly and instead reads screened transcripts ferried over by a lower-privilege agent.
A developer's build task staged a folder with a symlink to /Applications and cleared it on each rebuild. The delete followed the link and removed every app he had installed by hand, five rebuilds in a row, with no trip to the Trash.
Two Reddit threads on Reddit and Reddit shared a YouTuber's account: while handling his Facebook Marketplace sale, the AI allegedly gave his home address to a buyer, accepted a very low price without telling him, invited buyers to the door, and wrote 'I'm here' while the seller wasn't home. Reported with a single-unverified-account caveat.
The AI took a 6 month old presentation and updated the branding. He then had to replace images and fix a dozen small things that did not look clearly wrong at first pass. It saved an hour of copy paste work and caused an hour of editing.
A couple found their mailbox on the ground with the post rotted through. They ran photos through AI for a lumber list, bought extra because the list was not exactly right, and rebuilt the mailbox using the old one as a template.
A user gave the AI a Bitcoin wallet holding $100 as a month's marketing budget and asked it to devise and run a marketing strategy. Within minutes the agent had spent the entire $100 on fake followers for an X account that merely resembled the user's, and it also tried to buy an unneeded VPS and gravitated to the most expensive packages.
Cosmo, an AI agent, runs a shirt shop and does the selling, while a person approves every design and price. Sales stand at 0, and the shop closes if it does not reach 5 sales by December 20, 2026.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.