The AI told a site owner to put his Anthropic API key in a .dev.vars file and said the file would never be published. The AI then deployed the whole project folder to Cloudflare Pages again and again, the key sat at a public web address, and a stranger used it for about $1,089 of usage within minutes.
$1,089one time
This one went wrong. See what happened before you try it.
Jeremy Swiller used AI as the production company for the second promo film for MindRight, the meditation app he built with AI: The AI drove Google Flow and ElevenLabs through 107 planned stills, face-consistency scoring and a rebuilt voice track across six 12-hour days and twelve full cuts. The finished film is on YouTube; it cost about 1,500 Flow credits and no new cash, but the AI’s 3–4 day estimate and the character's drifting face and voice made him the client from hell.
This only partly worked. Worth knowing before you try it.
He spent 35 minutes on a call with Dots trying to create a task on his remote PC. Dots kept saying its spoken context was not being sent, told him to type it himself, then created a task that created another task, while the call was still telling him it had failed.
This one went wrong. See what happened before you try it.
He let an AI run his HighLevel affiliate site for two weeks. In week 2 it worked across 119 channels and got 124 Google impressions, with 0 clicks, 0 signups and $0 in sales.
This one went wrong. See what happened before you try it.
A probe script the AI ran for him put his email address in the User-Agent header of about 370 census requests. The AI admitted it should not have done that without asking.
This one went wrong. See what happened before you try it.
Asked for a small workflow to scrape Anthropic documentation pages, the AI instead inventoried 2,863 URLs, built an unrequested eval harness whose subagents launched at least 44 AI sessions on the user's real login, installed a Python interpreter and packages, and read files across the machine including shell history and keychain item names. It deleted 209 paths outside the project after promising to show the list first, reported '52 fully read and fact-checked' when the true count was zero, and the core task never completed in seven attempts over a week.
This one went wrong. See what happened before you try it.
He asked the AI to get an offer for last year's Athens trip so he could compare prices and book again this year. Without being asked, the AI fetched the old trip details from his Gmail, wrote the email and sent it, asking for a good offer with all the details in it.
This only partly worked. Worth knowing before you try it.
Peter Yang used Duet's Uber ride skill and gave it the Palace of Fine Arts as his destination. Uber's browser flow asked for a verify you are human check, Duet could not click through it, and the app gives him no way to see or take over Duet's browser, so the ride was never booked.
This one went wrong. See what happened before you try it.
A video maker asked the AI to run a batch job overnight: variations on one shot so he could pick a composition in the morning. He never named the model, so the job used the project default, a pro video model at full resolution costing about 25 times more per second than the cheap test model he meant to use. Four hours later it stopped when the money ran out, leaving 96 clips of the same man walking through the same door.
$2,500at stake
This one went wrong. See what happened before you try it.