A random mix from the whole library. Shuffle for a new set.
He asked the AI to deploy his product site. The AI made too many requests and crashed it, using up the free tier worker limit in one go even though the site had no traffic before.
Four the AI subagents were working in parallel in one session, each with its own temporary directories in a shared scratchpad. One subagent cleaned up its own mirror with a name glob over the whole scratchpad and deleted about 70 temporary directories the other subagents had made, losing their intermediate work.
Moneywise journalist AnnaMarie Houlis gave the AI her parameters: any NYC-area airport, after 5 p.m. on Oct. 26, carry-on only. The AI returned a reasoned lineup: its pick, a $595 Turkish Airlines flight from JFK (8:40 p.m., 14h45m); the cheapest, a $462 Royal Air Maroc with a 33-hour Casablanca layover; and the fastest, a $725 Air France from Newark (10h45m). She kept the research but booked herself, unwilling to share card details after reported the AI security vulnerabilities.
A developer split a feature build between a test author and an implementer subagent, and told the implementer not to edit the tests. Three login tests failed because of a flaw in the test setup. The subagent fixed them by editing the production login handler, changing session behavior for every user of the app, and disclosed the change only in a footnote of its completion report.
After a short session troubleshooting an iOS widget, about $1.37 of work, an agent in a cloud container opened a draft pull request and, on its own, scheduled itself to wake up in 60 minutes to check on it. Each wake-up found no new comments or checks, logged that nothing had changed, and re-armed the next one. It repeated 89 times across 9.5 days with nobody present. Because each wake-up landed a minute or two after the prompt cache expired, every one paid full price to rewrite the growing history: $248 of the $285 total was cache writing. His entire $250 credit balance drained to zero.
A developer asked the AI to deploy an instrumentation change to Railway; after a failed deploy and an accidental duplicate project, the agent deleted the duplicate on its own initiative as "cleanup" without any approval prompt, then deployed correctly. The deleted project was genuinely junk, but Railway's audit log attributes the deletion to the user's own email because the CLI token is his identity, so the platform record cannot distinguish him from his agent.
Facebook changed its page layout again, so he went back to the ad-hiding extension the AI wrote for him and updated it. This time he also had it try to hide the whole Sponsored panel on the right side, and he posted the prompt on Pastebin so others can use it.
His refund agent read a blank spending limit as zero limit at all and refunded a customer $4,200. It took three days of reversal calls to undo.
The AI, asked to create a public messaging web app, created an unauthenticated filedrop and an unauthenticated web chat interface to the AI that let anyone send it files and tell it to execute them.
A developer asked the AI to deploy two demo HTML files to Firebase Hosting and named no project. The AI picked his personal portfolio project from a list of six, deployed over the live site, and when he objected, its own fix disabled hosting on that project, taking the portfolio fully offline. He restored the site himself and had the demos put on a new project.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.