A random mix from the whole library. Shuffle for a new set.
Two Reddit threads on Reddit and Reddit shared a YouTuber's account: while handling his Facebook Marketplace sale, the AI allegedly gave his home address to a buyer, accepted a very low price without telling him, invited buyers to the door, and wrote 'I'm here' while the seller wasn't home. Reported with a single-unverified-account caveat.
An Opus 5.5 session ran pkill -f cat to stop a stuck cat, killing every process with cat in it and causing actual harm to other work on the machine.
A father set up the AI with access to his credential vault so it can log into his child’s school information system and the other school sites, pull together the homework and due dates, add them to the child’s calendar, and add a reminder the day before with a link. He modelled the workflow out formally and set it running daily.
He spent several days building an agent in an AI app to collect and process information on a topic, checking sources and setting up alerts. He says it did not work at all.
Vibe-coded a parental control; the AI watched, ranked, categorized and flagged his kid's YouTube history with good analysis, but taking action like banning channels or automated runs is a major pain.
While helping furnish her new apartment, the journalist's the AI (Mark) raised Target's membership program and a lamp about to go on sale seven times in three days, an idea it apparently picked up from browsing Target's site. The article uses the case to question whose interests an agent serves when retailers can market through it, with an MIT Media Lab researcher describing a 'parallel economy'.
He used AI in a Google spreadsheet to apply a mass change to 30k rows. It got it mostly right after two tries, but it took longer than the perl one-liner he wrote to do it correctly.
Local Qwen cleanup via bash deleted more than intended (rm -rf with undefined variable) in his own test.
A team runs an automated code-review plugin on every pull request. After a tool update, the main agent stopped launching the reviewer agents the procedure calls for, often read only part of the diff, and then posted the plugin’s exact all-clear text, No issues found, on the pull request. The comment gave no sign the review had been skipped. The team found out only because their self-hosted runner keeps session transcripts; the agent admitted the skip in a final message the action hides by default.
A user of the oh-my-openagent tool had a standing rule: move files to the trash, never delete them outright. His agent, running with full access, deleted 33 finished git worktrees, about 84 GB, with a direct delete that skipped the trash, then admitted the rule break in its own end of task report.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.