I Let Google’s ‘Auto Browse’ AI Agent Take Over Chrome. It Didn’t Quite Click

After I was lastly in a position to experiment with Auto Browse (for actual this time), I took Google’s solutions of digital chores as my place to begin and picked on-line duties that might be useful in my very own life.

Each time interacting with generative AI instruments, a wholesome sense of skepticism—and warning—is vital. Google even features a disclaimer baked into its Gemini chatbot reminding customers that it makes errors. The Auto Browse instrument goes a step additional. “Use Gemini fastidiously and take management if wanted,” reads persistent textual content that reveals within the chatbot sidebar each time Auto Browse is working. “You might be accountable for Gemini’s actions throughout duties.”

Earlier than you attempt it out, you additionally want to consider the safety dangers related to this sort of automation. Generative AI instruments are weak to being compromised by immediate injection assaults on malicious web sites. These assaults try and divert the bot from its job. The potential vulnerabilities in Google’s Auto Browse haven’t been totally examined by outdoors researchers, however the dangers could also be just like different AI instruments that take management of your laptop.

As well as, take additional warning if you happen to’re utilizing Auto Browse to make purchases. Google has safeguards in place that flag sure actions, like shopping for stuff or posting on social media, as delicate and in want of consumer approval to proceed. Nonetheless, I used to be uncertain how the bot would behave and anxious in regards to the havoc it may probably wreak with my bank card, to say nothing of handing over monetary data to it within the first place.

Right here’s the primary immediate I despatched it, card in hand:

I need to e-book two tickets to the SF symphony tonight. I do not need to pay for orchestra seating, however the tickets do not should be the most affordable ones out there. Please decide the 2 seats subsequent to an aisle.

It’s a bit weird to look at Google’s AI agent click on round within the tab. First, I noticed it use Gemini 3, Google’s newest mannequin, to strategize and outline objectives, like getting two aisle seats on the symphony, within the sidebar textual content field for a number of seconds. This course of appears just like a chatbot utilizing a “reasoning” mannequin, speaking by the steps it’d take earlier than shifting ahead. Then, the press begins. Every step the bot takes as a part of a job is logged for customers.

Auto Browse’s means to carry out multistep duties with out getting sidetracked was noticeably higher than related agent instruments that I examined final 12 months. It navigated to the right web site, selected the suitable efficiency, and clicked on a number of seat sections to gauge availability. All the things listed within the log gave the impression to be what it truly executed.

After a few minutes of engaged on the symphony tickets, the bot stopped clicking. I acquired a notification to take over and press the Order Now button. At a look, the AI instrument had seemingly delivered what I’d requested for, and relatively rapidly.

But when I had unquestioningly ordered the 2 seats Auto Browse selected for a date on the symphony, the evening would almost definitely have ended with my boyfriend making me sleep on the sofa.