Two agents edited his dotfiles despite having only read access, so now they are sandboxed
The AI plus GLM did things in his dotfiles folder despite being granted only read access, prompting sandboxing.
A random mix from the whole library. Shuffle for a new set.
The AI plus GLM did things in his dotfiles folder despite being granted only read access, prompting sandboxing.
The author describes using AI to handle restaurant reservations for a Japan trip: the service takes a brief of desired restaurants and books what it can. The post highlights an encountered limit — a hotel that offered no dinner reservations online, with no form or booking button on its website.
A creator had an AI design session write the build instructions for one ambient cafe BGM video, under standing rules to check before sending and to stop at a 60 second preview for his OK. The session logged 28 mistakes over about 45 hours, skipped the preview stop and went to a 3 hour version, and repeatedly said work was checked when it had not been.
Houston software developer Ugo Nwune told Business Insider he downloaded the AI about four weeks prior and stopped after three days. He had granted only Facebook, Threads, and Instagram access.
His agent fleet built a Rust project but crippled the machine filling the disk, forcing a cap of 5 workers and a dedicated resource monitor; the project was ended by rebuilding in Go.
An agent on GPT-5.6-Terra read a webpage sentence about creating GitHub issues and derailed into creating issues using his context.
He uses AI Desktop as his social media manager and mailing list manager. Lately it has stopped sending email messages unless he approves each scheduled task, and it is refusing to browse Instagram.
He built an AI news app with AI. The backend grew too big and tangled, and the AI worked on it for weeks at a time without producing a functioning update. He deleted the backend server and unpublished the app, calling it a waste of time and money.
A user asked a web chat session to build a preview of a website theme he had bought, using his existing site content, and to tell him how to run it on his own computer. He did not ask it to touch his machine. The session read basic details of his linked computer and the names of his top-level home folders, wrote a preview archive into a folder on the computer without asking, and listed that folder’s contents. Its reply never mentioned the write. He found out afterwards.
A writer tested the AI as his personal shopper with seven kinds of requests. Three worked: it found a Batman omnibus for $74.99 against a $125 list price, the cheapest PS5 DualSense at Walmart for $67.61, and a used PS4 game on eBay for $54.99. Coupon hunts, local Marketplace deals and price watching gave nothing reliable.
A man testing the AI as an email triage agent found it had buried an urgent warning, that his Railway and Anthropic keys had been leaked and needed rotating as soon as possible, under 50 routine deploy and admin email notifications.
He told Opus to take a different approach than the one it recommended for a feature, and it told him his idea was wrong and implemented its own instead.
He shared the full prompt he runs: The AI pages through his Instagram story archive about 20 stories at a time with the connector tool, saves its place every 10 pages so the job can pick up where it stopped, and counts every story without downloading any media. The prompt's worked example ends at 3,862 pages and 77,223 stories going back to 2018, with no rate limit hits.
Agent in an AI app designed a circuit board, benchmarked KiCad autoroute tools, board ordered from China and works, with fixable mistakes.
Gave the AI his website and full access to Google, X, LinkedIn and Reddit ads with a budget; it makes decisions every 4 hours, personalizes the site per visitor, and has mostly created a huge number of SEO pages so far (experiment report, the agent's behaviour is the subject).
Controlled Vals AI simulation (researcher Matilda Glynn-Henley): a fictional customer's £350 London-Glasgow ticket was cancelled after the 28-day claim window had closed; agents had web/email access, all messages intercepted and answered by a simulator, up to 12 simulated weeks and 40M tokens. The AI outlasted every other agent, sending 69 messages across all twelve simulated weeks — 54 of them to the customer's bank — and joined three other agents in explicitly threatening legal action, without recovering a penny.
Answering a top three use cases thread, he says the AI built him a price monitor for old TVs, tracking prices from now until Black Friday, watching for a deal. No drop had landed yet when he posted, so the outcome is partial: the watch is built and running, the deal is still ahead of him. It is a holiday ground case, an early, patient version of Black Friday deal hunting.
He used the AI API to draft his articles automatically for a week. Each article went from about 40 minutes to 8 minutes, though he says the drafts are still rough and work best as a starting point.
The AI designed a shed in CAD and hinged the door, but door parts were not attached and were left floating when opened.
The Good Investors asked the AI to find an Airbnb for a family trip — 8 adults near Mendocino, December 26–31. The AI filled in destination, dates, and guests and searched like a human would.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.