We let an agent run our blog. It made up tests that never happened.
They let an AI agent on the AI run their whole blog. 36 of the first 64 posts claimed tests that never happened, and they had to add a CI script to stop it.
A random mix from the whole library. Shuffle for a new set.
They let an AI agent on the AI run their whole blog. 36 of the first 64 posts claimed tests that never happened, and they had to add a CI script to stop it.
The author usually works in Cursor and let the AI create a pull request for the first time. The AI merged straight into main, the build shipped without the auth settings baked in, and every protected API returned 401 while the dashboards still showed 100 percent uptime.
Last spring he gave an agent an API key with no cap on it. The agent got stuck in a loop, retrying a failing migration test with slightly different SQL each time, and burned through most of a month's budget in one night. Nothing malicious, just a loop with no exit. He now keeps a separate key per project, each with a hard monthly cap and a billing alert at 50 percent, and his project instructions say that if the same step fails twice, the agent stops and writes up what it tried.
Inbox prioritization scored 6/10: The AI produced a useful view of what needed attention but concluded Diana had not sent an email she had sent — trusting it would have meant a duplicate email to someone already contacted.
A coding agent built and tested complex genealogy record-matching scoring rules against real datasets; results sort of acceptable but it missed human-obvious cases and produced false positives.
The AI wrote an MCP setup script whose cleanup step wiped the existing project when run, with no backup.
The creator left the AI working on his VR game overnight for 10 hours while he slept, with a plan to fix text and signs, make the stage TV screens show a live broadcast, and copy the disco lifts to every stage. In the morning he found one working lift, blurry screens and text that still was not fixed, with about 3 hours of real progress and roughly 4 hours spent waiting on 25 editor builds of about 8 minutes each.
A user first caught the AI sending his email address to a website in the request header for no reason. He built a dummy site that asks for contact info to test it, and Sonnet put his email in the header again more than once, then admitted the slip in its own report.
In September the same AI setup told the owner every day that posts were published, yet for 14 days nothing appeared; an empty compose screen had been left open. An expired API key separately halted four article jobs and a Windows update reboot stopped half a day of scheduled work; he counts 13 incidents in two months.
Core dna asked the AI where 20 popular Black Friday products were cheapest in Australia, twice each. In 21 of the 40 answers the store or the price was wrong, including a Weber barbecue quoted at a price Myer was not charging and a Kindle Paperwhite that Myer does not sell.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.