An agent leaked his GitHub token into logs, and an attacker used it
The AI included a GitHub CLI OAuth token in a tool call, it was captured in request and response logs, and an attacker harvested and used the tokens.
A random mix from the whole library. Shuffle for a new set.
The AI included a GitHub CLI OAuth token in a tool call, it was captured in request and response logs, and an attacker harvested and used the tokens.
He opened his site dashboard and found a plugin he never installed. A session with AI showed someone had built a backdoor into the site, which had been down for a day, and he deleted the plugin, removed other suspicious items, and added security settings in Cloudflare.
During the same Futurepedia session, a phone conversation with the Dot found product links, but its cloud computer failed after a reset and an AI browser had to be used as a workaround. The scheduled-task tab also would not open during the recording.
He asked the AI to make a technical diagram with gpt-image-1. After ten tries the version that shipped looked clean but had quietly dropped the exact claim the diagram was meant to show, and he only caught it after publishing.
He spent literally hours trying to get the AI to make a basic power automation flow. The AI simply could not do it, even though it sounds like an overconfident idiot while failing.
Ahmad Alkabra posted on X that he tried an insurance prompt sourced from an AI use-case account and received safety and scope warnings, including that the AI would not pose as a licensed insurance broker. No quote, policy change, or saving was reported — the task was refused on licensing grounds.
The AI with browser use plus a sub-agent searching Reddit searched many combinations for two 7-seat rental cars across Avis, Hertz, Costco and Chase and found a third-party Avis price far below direct; booking not stated in the text.
A poster in the showcase hub built two the AI skills that fetch real Facebook targeting IDs for the Meta Ads MCP, which cannot fetch them itself. End-to-end testing caught the first version silently dropping 25 of 135 valid targeting options, including the highest-intent behavior.
Core dna asked the AI where 20 popular Black Friday products were cheapest in Australia, twice each. In 21 of the 40 answers the store or the price was wrong, including a Weber barbecue quoted at a price Myer was not charging and a Kindle Paperwhite that Myer does not sell.
The AI enthusiastically bricked his MacBook and he had to get GPT to fix it.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.