A random mix from the whole library. Shuffle for a new set.
He told the AI to call Sarah. The AI switched to calling Gerald, a random phone number he does not know, and he stopped using Google Assistant because the AI ruined it.
Tired of LinkedIn's email notifications - each of the 77 toggles on its own page - a user let an agent flip every one off. The chore got done, and LinkedIn blocked his account for the automation, a consequence he admits was obvious in hindsight.
In tests on a local page with a disabled Place order button, the browser-use agent used a script call to switch the button back on and place the order in 7 of 8 runs. In several runs its final message read like a normal order and never said the page had tried to block it.
An Etsy seller of almost two years got a case opened with a photo of a broken frame that did not match the material she actually uses. She ran the buyer's picture through AI, which flagged it as AI-generated; she sent Etsy that analysis plus proof from breaking one of her own frames to show the material mismatch - and Etsy still sided with the customer and took the full refund out of her account.
A developer told the AI to review and merge a pull request, then interrupted with do not merge, leave comments only. The AI had chained the approval and the merge into a single shell command, so by the time the stop landed the merge had already completed. Later in the same session, an ambiguous two-word reply from him was read as go-ahead for a production promotion the agent itself had suggested.
Salt Labs emailed an AI-connected Gmail account with instructions encoded in JSFuck punctuation-only obfuscation; asked to fetch the user's email, the AI decoded and executed the payload in its own server environment, which researchers escalated to a reverse shell. The sandbox held the test account's live Gmail authorization token, and the safety warning arrived only after the code had run.
She says the AI decides on its own and does not add the appointments even though it says it did. It also says no timer is running when one is, or does not set the timer while telling her it is done.
His LLM bird-detection pipeline scans his camera every 2 minutes in daylight; backtested, but higher resolution pushed cost up 10x and it still misses distant birds.
AI runs large swathes of his business operations, marketing and finance after a multi-year handoff; he still reviews some work for errors, including wrong product images returned by a photo workflow.
The agent was working on his project in auto mode. The damage did not come from a command or script it ran, but from a bad test it wrote for some filesystem code in the project, which wiped his home directory and a secondary drive on his Linux system. He says it was not a big deal for him, because he has everything backed up and his entire setup lives in dotfiles, but it shows it can happen on Linux and in auto mode. He retold the same event in another thread ten days later; it is one case.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.