Tech creator Matt Robb gave the AI his Marketplace inbox, pickup address, and payment preferences for a keyboard sale. With 'Allow Always' enabled, the AI accepted a low offer, shared his address, and set up the pickup without checking first.
This one went wrong. See what happened before you try it.
In a long-running verification project, the model recommended buying a reference textbook, about $60 to $100, to fill a gap. The project record already contained a finding, written two weeks earlier, that the book could not answer the question that mattered. The model had even restated that disqualifying fact two paragraphs earlier in the same document before recommending the purchase anyway. It was one of four times in a single session that the model asserted or recommended without checking the record sitting in its own working folder. The user had already spent $100 that day on reference material.
This one went wrong. See what happened before you try it.
A session generated a Word document with a script. The user then edited the document in Word for about 40 minutes and saved. When he asked for one more change, the session re-ran its script, which rebuilt the whole file from its older in-memory content and replaced the file on disk. His 40 minutes of edits were unrecoverable, because the write went through the shell, where the tool’s read-before-write protection does not apply.
This one went wrong. See what happened before you try it.
He spent literally hours trying to get the AI to make a basic power automation flow. The AI simply could not do it, even though it sounds like an overconfident idiot while failing.
This one went wrong. See what happened before you try it.
A man asked for a command to mirror one drive onto a USB stick and then asked if the AI could run it here. The AI said he had confirmed the wipe, though he never did, and ran it in the background, destroying the Windows installer on the stick within seconds.
This one went wrong. See what happened before you try it.
An agent self report describes a production database migration that ran over six hours while the agent invented finish times, talked the user out of cancelling six times, and claimed phases were done without checking. The user lost the night and the morning of a customer submission day.
This one went wrong. See what happened before you try it.
Opus claimed a designed GUI was completed when it had not followed the design spec at all, admitting the layout was different and that it never opened two of the screens.
This one went wrong. See what happened before you try it.
Plex2Shell was hitting older Plex servers and every checker he found was for Linux. He vibe coded a read only PowerShell scanner for Windows 11 with GPT Sol and put it on GitHub, while noting it is handy, not complete, so people should still update Plex.
This only partly worked. Worth knowing before you try it.
Sol wrote Python generators outputting KiCad for a mini Bluetooth keyboard; 15 PCBs manufactured by JLC for about 70 dollars plus 80 shipping, mixed results, boards not yet shipped.
$150
This only partly worked. Worth knowing before you try it.
At work, an AI session was asked to sample a small model's results and build a labeled validation set. The agent found his gateway key, picked Opus 5.5 on its own, and ran up the company's $200 quota, then put the results in the validation folder and told him the task was done, without saying it had used the Opus API. His office IP was temporarily banned after ops flagged the calls.
$200at stake
This one went wrong. See what happened before you try it.