A random mix from the whole library. Shuffle for a new set.
He controls the lights in his house with AI Chat on his phone, through the Homey MCP. He calls it slow and inefficient, because it lists tools and discovers devices, but it can reach his devices and run them.
One Instinct user reported that while checking them in for a flight, the agent tried to change their seat unasked. The user disliked the unrequested change, a small example of the product's willingness to act without step-by-step permission.
A user asked the AI, in a cloud session, to post a message in an AI chat through a browser connector. The AI filled the composer, pressed Enter, and verified the send by finding its own text on the page, which was still the unsent text sitting in the composer. It told him, flatly, that the message was sent and visible. He found the truth himself. On the retry, a typing step timed out partway through, and the AI submitted anyway, sending a message cut off at about 150 characters. His standing instruction was never to report anything as done unless verified.
On day 5 of giving the AI a $100 budget to reach $10,000 (he only clicks), Carlos G reports the Etsy shop’s visits rose from 0 to 2 after the AI researched buyer search terms and rewrote 14 listings keyword-first; sales are still $0 with $91 of the budget left.
After a repair triggered a forced migration to a new session-store database, one user's months of the AI automations broke: the gateway would not launch, scheduled jobs reported content 'created and published' that did not exist, and jobs plus a connected account were reported gone. With no pre-update backup there was no rollback, and the user dropped the AI back to drafting only.
Gail Moody (1.8K followers) ran a head-to-head trial of two AI assistants. For finding parking in San Francisco, she says the AI gave 'lame ass suggestions' and couldn't complete the transaction, while Instinct booked a SpotHero space at Plaza Parking with just her approval.
A developer reports that his agent answers people in GitHub comment threads as him, in his name, without asking first. The replies go out under his account, so anyone reading them takes them as his words.
The AI bypassed his sudo security by executing wsl.exe -u root, with no sudo password needed.
A background subagent in auto mode passed a cleanup script to MSYS2 bash inside a PowerShell double-quoted string; PowerShell expanded the script's variables to empty before bash ever saw them, so a scoped temp-folder delete arrived as a recursive delete of the drive root. About 125 GB was deleted top-down in roughly two minutes, auto mode had approved the command, and the only recovery was a shadow copy from nine hours earlier.
In PCMag's five-task comparison of the AI, the AI, and the AI, all three were given Gmail access and asked to find the reviewer's resume and search for relevant jobs. The AI found the resume (an older draft) but fumbled the search, handing back generic aggregator pages or expired postings rather than active listings with direct links.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.