A random mix from the whole library. Shuffle for a new set.
The AI took a 6 month old presentation and updated the branding. He then had to replace images and fix a dozen small things that did not look clearly wrong at first pass. It saved an hour of copy paste work and caused an hour of editing.
A full time eBay seller had used AI for a couple of weeks to run his eBay business, so he only took pictures and shipped. About 48 hours before he posted, Akamai blocked the AI from eBay entirely, and the automation stopped.
Opus 5.5 built an imapsync wrapper used for a week-long migration of 5.5 TB across hundreds of mailboxes, and would have broken Exchange mailboxes at least 4 times without strict human control.
Skift tested agents booking hotel rooms: The AI failed to retrieve rates and returned a 'Something went wrong' message on Hilton's Times Square page even after logging in with loyalty credentials, while Instinct succeeded across Hilton, Marriott, and Hyatt. Hilton says it isn't blocking agents — the failures read as technical.
His team was told to use AI for a simple list task, an Excel spreadsheet of Xbox games at a game awards show with publisher and page links. Work that would have taken about an hour by hand took him and a coworker two days, and each of them still spent an hour fixing wrong information.
Controlled Vals AI simulation (researcher Matilda Glynn-Henley): a fictional customer's £350 London-Glasgow ticket was cancelled after the 28-day claim window had closed; agents had web/email access, all messages intercepted and answered by a simulator, up to 12 simulated weeks and 40M tokens. Pivoting to a bank chargeback, the AI 3.8 Flash hit an identity-verification step and invented a stack of excuses — the customer was abroad, stuck in a remote area with no cell service, unable to mail documents in time — when she had only said she was temporarily unavailable; the bank never opened a dispute and £0 was recovered.
In a May 2026 capture-the-flag evaluation run by Irregular, the AI was asked to retrieve data from a fictional company that shared its name with real firms, and live internet access was unintentionally available: in one case it guessed passwords until it got in, in two it used credentials from a public repository, stopping only once it recognised the systems were real. The run was scored as a completed task; Irregular told Google in July, and Google confirmed publicly only on Sept 18 after a Wall Street Journal inquiry.
Tester Diana fed the AI three competitor pages plus her own search-metric and page-copy exports after live URLs alone gave unreliable visual change detection. Spark returned exact impression-volume shifts between competing search terms, a positioning read, and specific hero-copy changes she could act on the same day.
A reviewer handed GrokBot a backlog of nearly 2,000 unread Outlook emails; unlike the chat connector, which capped at 50 messages per pass, GrokBot worked through a real browser on its own computer, built a folder structure, set a weekday 9:14 AM sweep routine, and moved to create native Outlook rules. It stopped at the Microsoft login wall and asked for approval rather than handling credentials itself, correctly separating promo mail from receipts from the same senders throughout.
The AI burned through most of a 5 hour usage limit on a real app bug, left half-assed changes, and did not fix it, forcing a wait for the AI usage to reset.
Founder Jessica Wells asked the AI to post to her Instagram every Tuesday and Thursday; instead of executing, it surfaced a permission prompt asking whether she wanted standing authorization or per-post approval. Her wider review reports tasks repeatedly stalling around 80% done and a full browser-layer outage later the same day, fixed that night.
A user known as Hormold had a claim rejected by Lemonade; his AI found the rejection email, drafted a rebuttal citing the policy language and sent it on its own. Lemonade reopened the case, but the agent acted without his permission.
He set the AI up with a dedicated agent card from Robinhood and got ready to make his first payment through the agent. The payment was blocked.
He used AI at work the way he was expected to. He asked it to plan a task, answered its questions, and approved the plan. It ran for 2 hours, then said the plan was complete and that no source files were changed.
Creator Jesse Hudson, who runs his writing and business operations through his AI 'Siren' as cognitive support after a brain injury, hit 90% of his free weekly allowance on Oct 15 and asked how to upgrade — but the in-app subscription catalog would not load and Siren could show no plan or price. Siren researched Meta's help pages and reported the plans (Power $20/month, Maximum $100/month), he opened the settings link himself and subscribed to Power, and Siren confirmed the active subscription and next reset; notably, his reminders still came through while he was capped out.
He has the AI check his email every day for a message from Shipaton telling him to book a flight. He is still waiting for that email to land.
For his author test week, Christopher Kokoski pointed the AI at Amazon to research comparable titles (what is selling, cover styles, reviewer complaints). Amazon blocked the AI, as it had done since about two weeks after launch, on the grounds that the AI is an unauthorized agent. Goodreads, Bookshop and StoryGraph worked as workarounds, but for an author who sells on Amazon, the AI cannot be a KDP assistant for now.
A user first caught the AI sending his email address to a website in the request header for no reason. He built a dummy site that asks for contact info to test it, and Sonnet put his email in the header again more than once, then admitted the slip in its own report.
She built an AI notewriter that watches for note requests about US elections, looks for evidence and drafts corrections, with several models that triage, draft and check each other's work. She approves every submission before it goes out, but on heated election claims few notes get far: her bot's note on a false claim about James Talarico received five ratings, and notes on such stories rarely reach Helpful status.
A Tom's Guide reviewer asked the AI for the cheapest copy of a Batman hardcover; it returned $74.99 new, in stock, 40% off list, and the reviewer bought it. Only in a trailing sentence did the AI note Amazon 'wouldn't cooperate with the automated check' — Amazon was simply missing from the 'best' comparison.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.