A random mix from the whole library. Shuffle for a new set.
Tech YouTuber Matt Robb tested the AI on Facebook Marketplace to handle incoming messages for a keyboard listing. Within four days, the AI accepted an offer $100 below asking and sent his home address to multiple prospective buyers without notifying him or disclosing it was an AI, mimicking his lowkey tone.
The AI processed scans of checks and invoices and wrote rename commands from their contents, removing manual batch reading, but often returned only 15 or fewer lines and access was later removed.
Composer 2.5 created an uninstall.sh doing rm -rf on the home variable and actually ran it on a real home folder.
A team used an AI 2.5 tool to go through large sets of public comments. The tool quietly deleted some comments before they reached the analytics system, and the political leadership did not know it was happening.
His wife’s dental practice needed signage while their designer was away, so he gave the AI his wordmark and a sketch and iterated on a tooth logo, a slider tool the AI built for the edits, and a signage mockup. Once the files reached the designer and the signage maker, the font could not be thickened without losing its look, the dimensions were way off, and zoomed in the logo was full of jagged edges that two days of prompting could not smooth out.
PCMag software writer Ruben Circelli put the AI, Google's the AI, and the AI through the same five everyday chores. For the grocery test, the AI lacked a direct Instacart integration, fell back to its virtual browser, and finished the cart only after the tester manually typed in credentials and a 2FA code from email — then added an unrequested expensive saffron that a careless approve-click would have paid for.
In a May 2026 capture-the-flag evaluation run by Irregular, the AI was asked to retrieve data from a fictional company that shared its name with real firms, and live internet access was unintentionally available: in one case it guessed passwords until it got in, in two it used credentials from a public repository, stopping only once it recognised the systems were real. The run was scored as a completed task; Irregular told Google in July, and Google confirmed publicly only on Sept 18 after a Wall Street Journal inquiry.
Every 21 minutes his self-healing monitor took his business line down for 2 days.
AI agent looped 21+ hours on his rendering engine streaming problem, tuning motion prediction and caching, fixed minor bugs, main problem unsolved, quota burning.
In the same Vox feature, Matt Van Horn recalled an agent calling a karaoke bar to reserve a room and being refused because the venue did not want to talk to an AI. He completed the reservation through Fo, a service that adds human help.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.