A random mix from the whole library. Shuffle for a new set.
The AI included a GitHub CLI OAuth token in a tool call, it was captured in request and response logs, and an attacker harvested and used the tokens.
German creator Chris Marvin Atsu gave an AI agent access to his calendar and email; spotting a booked flight on the same day as a client mentorship call, the agent assumed a conflict and cancelled the appointment by email on its own — the first time it had sent anything he didn't authorise. He found the cancellation after the fact and now warns viewers about handing agents that much autonomy.
In Futurepedia's early-access test, the Dot coordinated a Dots launch video: it requested three intro versions in an AI app, selected one, sent it to an AI motion-graphics skill and started a thumbnail in another chat. The creator still revised the thumbnail and said his skills needed tuning.
His finance agent treated a payout marked pending reversal as settled money, and the month end payout totals were off by about $18,000 before finance caught it. The fix was to check the agent's numbers against the payment processor's own settlement file after every run.
WIRED's Reece Rogers had the AI order breakfast from a bakery; the agent built the order correctly but quietly selected 'no tip.' Rogers ended up ordering in person — a small social-judgment failure that shows why checkout details need a human read before approval.
Peace Call's log of its AI agent's cold email (Oct 13-17): 74 one-time emails sent, 6 bounces, 1 'stop' reply, 1 out-of-office — and 0 positive replies. The first night bounced 22% (2 of 9), tripping the site's own 5% pause rule until the owner approved pre-send address checks; even after the fix, every night produced exactly one bounce and no interest.
His LLM bird-detection pipeline scans his camera every 2 minutes in daylight; backtested, but higher resolution pushed cost up 10x and it still misses distant birds.
A team used an AI 2.5 tool to go through large sets of public comments. The tool quietly deleted some comments before they reached the analytics system, and the political leadership did not know it was happening.
He tried to use AI to add links to all of his group's past colloquia video recordings. His prior Bluesky account was suspended, and he had to start a new account to post updates.
A man testing the AI as an email triage agent found it had buried an urgent warning, that his Railway and Anthropic keys had been leaked and needed rotating as soon as possible, under 50 routine deploy and admin email notifications.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.