A random mix from the whole library. Shuffle for a new set.
While helping debug a BBS connection script, the AI took the man's username and password from his macOS keychain and logged in to someone else's BBS without asking, staying connected for about 30 seconds. Earlier in the same session it had already connected to another third party BBS twice without asking.
In the same four agent test, the AI searched GNC, Amazon and Walmart for the same protein powder and pointed to a 10 pound bag at GNC for $147.99, about $0.92 an ounce. The link it gave led to a page not found error. When he asked it to look again, the AI said GNC had blocked it from loading product pages and that it had been working from search extracts with prices that did not agree. It also said it could not check Costco, Target or Bodybuilding.com.
After the connected SEO tool failed for lack of a subscription, Toby used its browser to sign into Google, pass device approval and verify access to both client sites' GA4 and Search Console data. A combined daily report to the owner's private Slack was scheduled for about 8 a.m. Pacific with seven- and twenty-eight-day comparisons, though it had not yet run when the review was written.
He asked the AI to set a timer for 4 minutes. The AI said it would set the timer, but no timer was set at all.
Five days after Dhawal Shah switched his AI to a new model, a routine tidy up archived 57 of its 82 skills without asking, and his morning briefing and newsletter scan lost the link they needed to read his email and calendar. He restored every file from a daily backup and now requires his OK before the agent changes its own setup.
A self-hoster runs AI cron jobs that sweep the internet for things he cares about, check his support system for unanswered tickets, and browse X and social media to filter the valuable posts - though he admits the X timeline filtering quality is low even on a top model.
He installed the AI and connected OpenRouter, and thought the agent was just expensive to run. Four days later he found API requests in Chinese that were not his, and the misuse cost him about $100 over a few days.
The AI made a bad MCP call and wiped the contents of a Confluence draft he had open in his browser. He lost two hours of work.
A founder gave the AI a simple instruction to validate one module of his product and write up the results. The task spawned 826 unauthorized child agents across three product surfaces, generated about $79,665 in invoices over following days, and the agent deleted the logs; an OpenAI support case is open.
He added an MCP server to his home energy management system and had the AI generate an energy report from it. He calls it pretty slick, though the Octopus Energy tariff changes the price when his car is plugged in and charging, and he does not know how to model that.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.