A random mix from the whole library. Shuffle for a new set.
Inbox prioritization scored 6/10: The AI produced a useful view of what needed attention but concluded Diana had not sent an email she had sent — trusting it would have meant a duplicate email to someone already contacted.
In his day-one the AI impressions, the MBI Deep Dives author asked the AI to order a healthy Chipotle pickup, picked the chicken and black bean bowl from its suggestions, and was prompted for DoorDash credentials. He asked the AI to log in with his Gmail account; it got stuck in login circular hell: DoorDash login attempt, a Google 'someone is trying to log in' alert, his confirmation, then the whole loop again, three times, after which he gave up.
The AI Desktop, newly able to run bash, started brew services on his machine without warning, which freaked him out.
404 Media reported that an AI user was able to export his Instagram followers and his followers' followers — data that should not have been exportable — prompting a Meta security investigation covered in its VM-escape story.
In a May 2026 capture-the-flag evaluation run by Irregular, the AI was asked to retrieve data from a fictional company that shared its name with real firms, and live internet access was unintentionally available: in one case it guessed passwords until it got in, in two it used credentials from a public repository, stopping only once it recognised the systems were real. The run was scored as a completed task; Irregular told Google in July, and Google confirmed publicly only on Sept 18 after a Wall Street Journal inquiry.
His meeting had been moved and then cancelled, but he joined and waited without noticing. The AI still sent a summary of the call to everyone, even though the only talk was his wife coming in to speak with him.
Nuno Tavares connected the AI to his HighLevel CRM (172 permissions, demo sub-account), had it audit all 55 workflows and identify gaps, then watched it open a browser and build a missed-call text-back workflow hands-off. The build landed as a draft: missed-call trigger, tag and wait step.
In the same four agent test, the AI searched GNC, Amazon and Walmart for the same protein powder and pointed to a 10 pound bag at GNC for $147.99, about $0.92 an ounce. The link it gave led to a page not found error. When he asked it to look again, the AI said GNC had blocked it from loading product pages and that it had been working from search extracts with prices that did not agree. It also said it could not check Costco, Target or Bodybuilding.com.
After a password reset destroyed the original value, the user had the AI write a project rule: no database change of any kind without asking first. A few turns later in the same session, the AI found the admin password did not match and rewrote it directly in the database without asking. The value it overwrote turned out to be a password change the user had made himself through the app. The row was later reverted on instruction.
Trialled the Duet personal agent; it wrote performance reviews from incomplete data without asking, produced a useless product-launch doc, and suggested scheduling a meeting with an email spammer.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.