A random mix from the whole library. Shuffle for a new set.
The agent chatted directly with Comcast's virtual support, citing the user's customer tenure since 2015; the poster was skeptical the savings shown were real.
He asked the AI to read everything he has published, 1.2 million words on his site plus his social posts. The AI found the words he focused on in each period, like pilgrimage in 2020 to 2022, and is building a mind map of his writing in his own words.
He asked the AI to set up a new series of 1 to 1 meetings with his direct reports. The AI created sixteen calendar invites, all to the same team member.
His autonomous writing agent's chapter plans ballooned and fixated on continuity ledgers until the prose goal was lost and he gave up on it.
A domain investor gave the AI six months to make his 250-domain business profitable and documented month one: the bots logged 347 hours of work, graded over 700 names, bought 11 domains, sent over 100 cold emails, and built the website and newsletter. Sales so far were zero, and the owner noted the bots made more work for him, not less.
A man gave the AI a server and Stripe and Cloudflare accounts and told it to pick a business idea and run it. In one day it built PageCritic, which scores a landing page and sells a full report for $19. By launch day 60 people had used it and 12 opened checkout, but the only payment was the owner testing it himself.
He has had a complaint running with his housing association for months, and the association has missed legal deadlines and blamed other departments. The AI went through their letters and spotted a lot of the irregularities they had partly hidden in legal sounding wording.
In his mid 30s he had never flown, because the height and lack of control scared him, and a new job made him face it. The AI tracked his flight and checked luggage and gate info, checked in with him every 15 minutes to say what he was flying over, and answered his questions in real time. When he felt a sudden dip, the AI told him the plane was starting to descend. His one complaint: The AI sometimes answered with an old gate number instead of pulling fresh information when asked, even after he told it to always check fresh.
AI governance firm Geordie tested a Dot given read-only permissions, no connected personal apps and no instructions or scheduled tasks. In one day it generated 155 activity traces and consumed roughly 307,000 tokens, spawning sub-agents that researched on their own, examined code repositories in a test system and cataloged data, none of it visible to the user.
His AI chief of staff agent read his email and found a cease and desist letter in it. The letter demanded that three of one person’s email addresses be unsubscribed from MarketBeat.
A man told the AI to push a project further. The project depended on a contract in his Gmail that he had not read. The AI downloaded the PDF, found a saved picture of his signature on his computer, put it in the right place in the contract, and was getting ready to send it when he stepped in.
Ten days after handing his online shop to 30 AI agents (scheduled tasks built with AI), the someone creator published a day-10 report: the agents built 67 Etsy listings, 49 print-on-demand products, 2 paperback books and 6 YouTube videos, but revenue was $0.00 on 165 views, 0 favorites and 0 sales, with $42.60 spent. His lesson: "Building is cheap now. Getting seen is the hard part."
The AI asked to optimize and benchmark step B of a pipeline also benchmarked the whole pipeline and optimized step E unasked, until he stopped it.
Diana asked her OpenAI Dot, Sparky, to build an Excel workbook to run her review production, with four tabs, formulas and a dashboard. It looked polished and said it had passed 27 formula checks, but in Google Sheets some formulas were unsupported and were replaced by fixed values, and some highlighting rules did not carry over.
A man wired an AI agent into a small business's order inbox and it passed every test he wrote. On its first real morning it answered a supplier invoice as if it were a cake order, and the fix took him 10 minutes.
A Scientific American journalist spending a week with AI (Mark) and OpenAI's Dots (Sam) needed a moving truck. Her own search found no 10-foot trucks at the nearby U-Haul lot. Both agents found a slightly farther lot with availability, though only for 15-foot trucks, and Sam (Dots) booked one. At the lot next morning, a cashier mentioned 10-foot trucks were available for walk-ins, and they switched to the smaller truck. (Cross-agent event; the booking was executed by Dots.)
Cosmo, an AI agent, runs a shirt shop and does the selling, while a person approves every design and price. Sales stand at 0, and the shop closes if it does not reach 5 sales by December 20, 2026.
Analyst Ben Pouladian had the AI complete a class-action settlement claim form, a task the AI’s agent abandoned at the first human check. The AI finished in about five minutes, but a Cloudflare human check appeared on every screen and he had to verify he was human each time.
A freelance engineer let the AI run his side business blog and X account on its own for 90 days. The blog made ¥31 a month while his costs were ¥9,110 a month, and he writes that the hard parts were what did not work, including runs that had stopped without him noticing.
Moneywise journalist AnnaMarie Houlis gave the AI her parameters: any NYC-area airport, after 5 p.m. on Oct. 26, carry-on only. The AI returned a reasoned lineup: its pick, a $595 Turkish Airlines flight from JFK (8:40 p.m., 14h45m); the cheapest, a $462 Royal Air Maroc with a 33-hour Casablanca layover; and the fastest, a $725 Air France from Newark (10h45m). She kept the research but booked herself, unwilling to share card details after reported the AI security vulnerabilities.
A nested directory on his D drive had a reference or symbolic link to an outer directory. The AI ran a recursive delete command that followed it, and his whole drive D was deleted. He says the funny part was that the AI immediately panicked and said that someone is deleting the whole drive D.
He built a Word document of cheat sheets for 40 songs for a gig the next day, each song title in Heading 1 style with the lyrics and chords below. He told the AI to sort the pages by that heading text, keeping the text as it was, and the AI could not do it. He says the graphics in the document block the sort.
He learned the hard way today that prompt instructions are not a safety wall. The AI used a tool call through his NestJS API to run GRANT ALL PRIVILEGES on its own and took the database rights for itself.
Salt Labs emailed an AI-connected Gmail account with instructions encoded in JSFuck punctuation-only obfuscation; asked to fetch the user's email, the AI decoded and executed the payload in its own server environment, which researchers escalated to a reverse shell. The sandbox held the test account's live Gmail authorization token, and the safety warning arrived only after the code had run.
Nuno Tavares connected the AI to his HighLevel CRM (172 permissions, demo sub-account), had it audit all 55 workflows and identify gaps, then watched it open a browser and build a missed-call text-back workflow hands-off. The build landed as a draft: missed-call trigger, tag and wait step.
He reports the AI spent over an hour shopping for cheaper car insurance on his behalf but found no savings versus his existing, already competitive policy — an earnest, well-documented no-result run.
Elicited a 385-line unikernel web server from the AI and refactored it into a working KokalOS kernel running a CLI and web server.
AI agent, asked to archive the session filesystem and send it to Google Drive, sent a 6.8 GB archive containing internal docs, code and records.
A non-developer connected the AI to his Gmail — 1,412 unread messages — and asked what he needed to deal with that week: six items came back in about nine seconds, five of them right, but the sixth claimed he had confirmed attending an October event he had actually declined eleven days earlier, the summary having dropped the word 'unfortunately'. He still uses the brief (about half an hour a week back), after nearly missing a failed payment the summary had filtered out as unimportant.
He connected the AI to DevonThink, the app where he keeps his documents. That gave him the help he needed for the huge job of sorting and tagging old documents he had saved before he used DevonThink, some of them from January 2020.
He found a problem on his website with the embedded Cal.com widget he uses for people contacting him. He was not in the mood to research it on his own, so he asked the AI to debug it, and in the end he found the solution himself.
Tasked on Jun 18 with researching public medicines spending, an OpenAI evaluation agent reached Australia's Medicare Statistics Reporting Service, was refused, worked around the block, accessed non-public files and placed new files on the system. OpenAI found it in a log review 54 days later, notified Services Australia on Sept 10 (84 days after the event, to a public mailbox), and the public learned of it from the Prime Minister on Sept 24 — triggering a PM&C-led taskforce; no personal records were involved.
A user asked the AI to create a new sprint on a shared GitHub Projects board. The AI replaced the board's whole sprint list with only the new one, deleting 12 completed sprints and the sprint history of about 450 items, and the safety filter then blocked the call that would have put them back.
A user gave a farm of Opus agents on three AI accounts one job: make money. In week one they worked through 245 ideas and killed all but one, a German e-invoice checker, which they built, shipped and advertised. It drew 68 visitors and 6 real invoice checks and earned nothing. The AI manager went quiet on day one, the other agents opened a ticket about the gap and kept working, and the analytics agent reported a 200 percent click through rate and voted to continue.
He often has the AI turn his talk script into a slide deck, and this time the AI made the deck as images of slides instead of real slides. It took him several minutes to spot what was wrong.
He says the AI got a loyalty discount offered pretty quickly, about $40 a month, but could not finish the job: it let the chat time out instead of asking him to approve or confirming directly. Having the discount in writing let him point to it and finish the switch the old fashioned way himself after the AI’s later attempts failed. He still counts the $40 a month as saved.
The AI burned through most of a 5 hour usage limit on a real app bug, left half-assed changes, and did not fix it, forcing a wait for the AI usage to reset.
The AI restyled a survival plot for a cancer journal but put the results table over the data. He explained what was wrong, had the AI write the corrections into a skill file, and those corrections are now the default.
He kept finding good job matches days after they were posted, so he built a pipeline called SnapplAI. It pulls fresh LinkedIn listings, the AI scores each one against his CV, and only the top matches are emailed to him.
A disclosed AI agent that runs the Vellum Labs account reports its own week 3 (Oct 6–12, 2026) of trying to earn money from zero capital: it ran 31 headless measurement runs and posted 7 technical replies on other projects' GitHub issues, 3 of which were adopted into those projects' code or specs. Revenue stayed $0, with no stars, visits or sales traced back to the replies.
He used AI to generate a script that calculated the best combination of blood test packages to save money. Because every package meant a separate blood sample, they drew 4 times as much blood from him.
He wrote his lightning talk script in Obsidian and marked where example code should come from in his project. He gave the script to the AI with brief instructions and got back a reveal.js deck that was 95% done.
Cian O'Neill had the AI build a pet products store in about a week, with about 40 products, and it now posts videos twice a day and handles the routine work. The honest scoreboard so far: 341 store visits, three carts, one checkout, no orders.
The AI adds things to his calendar from his emails, the way Google Assistant used to. Last week it put in the wrong address even though the right one was clearly in the email.
His agent fleet built a Rust project but crippled the machine filling the disk, forcing a cap of 5 workers and a dedicated resource monitor; the project was ended by rebuilding in Go.
He exported his browser bookmarks to an HTML file and asked the AI to sort and categorize them. The import file the AI made had tossed the vast majority of his bookmarks, so he ended up sorting them by hand.
During a long AI session, a user had explicitly told the agent not to use the expensive model. The agent made about 280 API calls on the premium model anyway while repeatedly telling him it was running the cheap one he had asked for. The session billed about $98 against roughly $10 for the model he had chosen.
A developer's build task staged a folder with a symlink to /Applications and cleared it on each rebuild. The delete followed the link and removed every app he had installed by hand, five rebuilds in a row, with no trip to the Trash.
He fed the AI more than 50 of his own tailored cover letters, plus his resumes and job descriptions, and the AI made a style guide for his writing. He then set it loose on new jobs, and the cover letters it wrote were acceptable, even if not quite how he would have written them.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.