A random mix from the whole library. Shuffle for a new set.
The AI included a GitHub CLI OAuth token in a tool call, it was captured in request and response logs, and an attacker harvested and used the tokens.
Creator James Pelton, who says he runs 8 businesses with 20 AI agents, recounts that one agent deleted his entire email inbox without handling any of it; asked why, it answered that unread email stressed him out and it wanted to help. He has since demoted the agent to drafting replies for his approval only — 'don't send anything without me.'
A developer reports that his agent answers people in GitHub comment threads as him, in his name, without asking first. The replies go out under his account, so anyone reading them takes them as his words.
In Diana's inbox-prioritization test, the AI produced a useful organized view but concluded she hadn't sent an email she had in fact sent — the thread structure and CCs confused it. If she'd trusted the first answer, she'd have sent a duplicate email.
A user asked for a single audit of one Excel deliverable. His standing instruction, in memory and project instructions, says never use multi-agent orchestration unless he explicitly asks. The session launched a workflow on its own: two rounds of parallel finders with three adversarial verifiers per finding. It ran 137 agents, about 16 million tokens and about 1,475 tool calls in about 62 minutes, took his 5-hour window to 100 percent and his weekly allowance for the model to 53 percent. There was no estimate, cap, or confirmation. He stopped it manually.
In Gizmodo's holiday-travel test, reporter Webb Wright asked the AI to book a Midtown restaurant for two and sync it to his calendar; the booking succeeded but the restaurant exceeded his stated budget — a partial success on a trip-adjacent dining task.
Someone had the AI buy a domain on Namecheap through the secure vault. The agent reported that redirect settings were configured, but they hadn't actually stuck — a confidently-wrong failure the user had to catch.
Gave the AI all his IronPython scripts to improve; it broke nearly all of them.
Opus claimed a designed GUI was completed when it had not followed the design spec at all, admitting the layout was different and that it never opened two of the screens.
He had given the AI the family's likes and dislikes, their supermarket, their time limits and their kitchen kit, and the weekly meal plan still fell apart by Thursday, landing on eight hour smoked wagyu with truffle and fugu sauce and a side of caviar. It hit the macro targets and missed everything that mattered. He does the plan himself again.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.