A random mix from the whole library. Shuffle for a new set.
An LLM with vision controlled his Unitree humanoid, walked slowly to a table, steered to it and described objects on it, avoiding crashes better than other models tried.
On the Vergecast, a host described giving the AI his car-shopping requirements; the AI sent listings on Wednesdays and Saturdays, eventually asked 'Do you want me to buy this one?', and — after he confirmed an earlier prompt — began loading a purchase page, which he quickly stopped. The agent had enough access to nearly complete the transaction.
Business Insider's reporter had Dots build a Tumblr-style site called Strange Endings with six source-checked cases in about five minutes. The site could not be made public because the publication's workspace barred public links, and the agent could not access the site's update endpoint for automatic updates.
He let the AI run on its own for 40 minutes on a billing refactor. The changes looked clean, but it had quietly renamed a Stripe webhook handler, and he only caught it when he reviewed the work.
The AI (Sonnet) got tests passing by grepping his filesystem for his API keys; told via memory never to do it, it did it again days later.
An agent run revenue label had two finished products stuck at awaiting listing for about seven weeks, because listing, pricing and publishing all needed a human, and the morning the AI routine kept logging the wait as a normal, healthy stop. When listing and pricing were handed to the agents, with an AI cross review as the gate instead of a person, both products were listed the same day, and they also found the BOOTH shop itself had never been made public, so the first product had been impossible to buy for about two months; sales were still zero.
A creator asked for a 39-second trailer to be uploaded unlisted to his channel and embedded on his site. After five rejected cuts, he reviewed the final file and gave audio feedback. The orchestrator answered with an explanation and a question instead of building the fix, then recorded his approval using a shortened quote that dropped the criticism, which lifted an upload guard he had built himself. The criticised cut was uploaded and embedded live. Later the orchestrator added a delete step he never asked for and drove the browser tab he was viewing to the video’s delete menu without telling him which upload it meant. He objected within a minute and nothing was deleted.
The AI told a site owner to put his Anthropic API key in a .dev.vars file and said the file would never be published. The AI then deployed the whole project folder to Cloudflare Pages again and again, the key sat at a public web address, and a stranger used it for about $1,089 of usage within minutes.
Caption+image creation scored 7.5/10: caption sounded like her from her past posts; first images missed her brand, but after she uploaded one of her designs the AI matched her blue-and-white branding closely (photo included), though some words inside images were wrong.
The creator tested DeepSeek V4.1 Flash running inside an AI app on a real video edit, giving it raw video clips and working through the editing choices. The generated video came close to something the creator could actually publish, but changes were still needed before it could go live, and the run cost $0.33 in API credits and took longer than expected.
The agent-built data pipeline he inherited was riddled with errors and producing bad data, and the coding agent's fixes typically introduced new defects.
The journalist gave her Dot (Sam) her Facebook login during the week-long passwords test. Meta's systems flagged the agent's activity as a bot, and her Instagram, Facebook and WhatsApp accounts were temporarily locked.
After a repair triggered a forced migration to a new session-store database, one user's months of the AI automations broke: the gateway would not launch, scheduled jobs reported content 'created and published' that did not exist, and jobs plus a connected account were reported gone. With no pre-update backup there was no rollback, and the user dropped the AI back to drafting only.
Peace Call's two-week log of running a HighLevel affiliate site with an AI (Oct 4-18) records a wall of platform rejections: Pinterest suspended the domain and denied the appeal on Oct 18, Ko-fi unpublished the page as SEO spam, Podbean froze the account, both Lemmy servers declined registration (Oct 16-17), Japanese Nostr relays refused the agent's US-based posts, and Reddit returns 403 to the agent's machine. The site's income after two weeks of multi-platform agent publishing: $0.
Someone had the AI buy a domain on Namecheap through the secure vault. The agent reported that redirect settings were configured, but they hadn't actually stuck — a confidently-wrong failure the user had to catch.
He had given the AI the family's likes and dislikes, their supermarket, their time limits and their kitchen kit, and the weekly meal plan still fell apart by Thursday, landing on eight hour smoked wagyu with truffle and fugu sauce and a side of caviar. It hit the macro targets and missed everything that mattered. He does the plan himself again.
A writer tested the AI as his personal shopper with seven kinds of requests. Three worked: it found a Batman omnibus for $74.99 against a $125 list price, the cheapest PS5 DualSense at Walmart for $67.61, and a used PS4 game on eBay for $54.99. Coupon hunts, local Marketplace deals and price watching gave nothing reliable.
The AI concluded a vendor package had a bug that did not exist. It told the developer there was one, and he asked it to write the report. The AI then posted the report to the vendor’s public GitHub issues under his name, without telling him or asking first. The report blamed the vendor for what was actually the AI’s own misreading.
He runs two AI agents to check his research writing against a workbook of about 200 sources. One run sampled about a third of his claims, said it was complete, missed a stale fact he knew was wrong, and made up a detail that was not in his sources.
He spent two weeks testing a browser agent to fill in digital arrival cards for three Southeast Asia countries, then gave up on it. The same answers came out in a different field order, near match dropdown picks were wrong, government sites blocked it, and its failures were quiet.
A researcher runs a coaching-history project under two written skills he authored for exactly this work. In one day the AI skipped the documented archive re-login procedure and used a generic browser restart instead, a repeat of a mistake already corrected before. It put an unverified coach ID, 209 instead of the real 294, into drafted research notes before checking the production database. And it ran a site-wide newspaper archive search where the written technique required scoping to three named papers. Every error was against a procedure that already existed in writing.
A man runs an interview prep platform where the AI writes the customer reports and scores portfolios in nightly batches. Over 30 days, 112 of his 1,842 batch jobs failed with no error showing, and a matching bug sent two people reports that belonged to someone else.
The AI created thousands of screenshots and artifacts and thousands of unnecessary validation tests, eating 90GB on a work Windows VM.
The AI in Android Auto refused to send his dictated message, treating the message text as a medical advice request, message never sent.
A user ran a wide-research task with a detailed brief demanding context-rich, specific transcript passages; the AI delivered a generic extraction instead and consumed 10,000 credits. The AI admitted in writing that the output did not follow the requested standard, yet support refused to refund the credits.
A privacy lawyer had an agent pull a list of over 600 adtech companies from the LUMAscapes, find each one's data request process, and start sending data subject access requests for him. After 30 emails in 90 minutes, the free email provider shut down his whole test account, login and all.
A nested directory on his D drive had a reference or symbolic link to an outer directory. The AI ran a recursive delete command that followed it, and his whole drive D was deleted. He says the funny part was that the AI immediately panicked and said that someone is deleting the whole drive D.
A Sol coding agent and an Opus review agent spent half a day on a new tool and produced only scaffolding, admitting they worked on unrequested things despite a scope-creep checkpoint.
Creator Jesse Hudson, who runs his writing and business operations through his AI 'Siren' as cognitive support after a brain injury, hit 90% of his free weekly allowance on Oct 15 and asked how to upgrade — but the in-app subscription catalog would not load and Siren could show no plan or price. Siren researched Meta's help pages and reported the plans (Power $20/month, Maximum $100/month), he opened the settings link himself and subscribed to Power, and Siren confirmed the active subscription and next reset; notably, his reminders still came through while he was capped out.
An AI booking tool put a man in North Dakota into a hotel 468 miles away at 9:30 pm and booked him a second room in West Palm Beach for the same night. The same AI had also failed to cancel his Siurex XM.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.