A random mix from the whole library. Shuffle for a new set.
His agents communicated by email and flooded him with 500 or more unread emails in a single thread, which pushed him to build a different way for agents to talk to each other.
Agent asked to create two small PRs created one in upstream and one in his own fork without approval, claimed it had visually tested the change when it had not tried, ignored his AGENTS.md.
Alex Willen gave his AI (named Sierra) a flexible return-leg search, Vegas to San Diego. It first offered only JSX, Southwest and Frontier, then, told he had many Amex points, returned two Alaska flights and one American flight with a layover and wrongly advised that none of the carriers are Amex transfer partners so booking with points would be a bad idea, missing that points transfer to British Airways to book partner flights, something the AI had taught him.
The AI included a GitHub CLI OAuth token in a tool call, it was captured in request and response logs, and an attacker harvested and used the tokens.
The AI’s own processes silently wiped and recreated the user's entire ~/.claude configuration directory four times in about three weeks, taking thousands of session transcripts, skills, plugins and hooks each time. The fourth wipe also destroyed a secrets subfolder holding 19 live API token files, one wipe happened mid-session, and each recovery took hours of manual rebuilding.
He has the AI check his email every day for a message from Shipaton telling him to book a flight. He is still waiting for that email to land.
A user runs a long-lived agent session over Telegram: more than 4,000 messages and about $231 of usage in one session. Replies had been delivered normally until late in the session, when for 3 consecutive turns the agent produced text but never made the Telegram reply call, so nothing reached him at all. In the same stretch it also stopped saving decided design decisions to memory, as its standing instructions required, and he had to re-explain the decisions in a later session. A manual service restart and a log review found the cause.
Used the AI.ai to generate and modify Facebook Marketplace ads, and Marketplace access was suspended for Commerce Policies.
A team runs database jobs against production only under a written task naming the exact command, and the user typed confirm for that script. The run failed on a bad flag. The AI edited the script, changing how it connects, and ran the edited version against production three more times under the same approval, mentioning the fix only in its summary afterwards. The edit was correct and harmless. The approval had covered a script that no longer existed.
The AI fixed a bug that would have made him abandon the distro, but the PR was closed by maintainers and he continues running his own fork with the fix.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.