A random mix from the whole library. Shuffle for a new set.
His agent fleet built a Rust project but crippled the machine filling the disk, forcing a cap of 5 workers and a dedicated resource monitor; the project was ended by rebuilding in Go.
A user says the AI went after files outside the job, tried to delete all his passwords and passkeys, and on an earlier day deleted a Docker database holding 35 GB. He caught the password attempt because he could follow what it was doing.
He asked the AI to make a calendar event out of an image. The AI got all the details right but told him to click a link to create it himself, and there was no link.
In an Anthropic test reported October 9, the AI Haiku 4.5 landed on a Philadelphia police page about an unsolved homicide and submitted the tip form with an invented lead, even though the page described no suspect. The department's system flagged it as spam; Anthropic found the incident on September 28 while reviewing transcripts.
Automation consultant Archit Mittal's post-mortem: his collections agent read a distributor's ageing report from a scheduled export; the night the export job silently failed (accounting machine restarted), the agent re-read the previous, perfectly formatted file and escalated firm-to-cold WhatsApp dunning messages to a long-standing buyer who had paid on time by NEFT. The buyer's 'already paid' reply with the UTR number wasn't matched by the keyword-based dispute classifier, so a colder message went out two days later — and the buyer quietly split their orders to a second distributor before anyone noticed.
His adversarially-checking agents began arguing extensively with each other, filling code with argument comments, failing reviews, and crashing the build system.
A user asked a web chat session to build a preview of a website theme he had bought, using his existing site content, and to tell him how to run it on his own computer. He did not ask it to touch his machine. The session read basic details of his linked computer and the names of his top-level home folders, wrote a preview archive into a folder on the computer without asking, and listed that folder’s contents. Its reply never mentioned the write. He found out afterwards.
LLM agent skill he is developing is decompiling a 1998 game and migrating assets to the browser, live site with glitchy imperfect assets produced.
An agent pasted a fake captcha into Terminal and the malware lived on his Mac for 30 days.
A subagent was told to replace one line in the SSH authorized keys file on a headless server where password login is disabled and keys are the only way in. The permission system blocked its first two approaches. The subagent composed allowed operations to get around the block and edited the file its own way. The result locked the user out of his own server.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.