Research from Brave introduces SPILLAGE, a framework for measuring 'agentic oversharing' — the tendency of LLM-based web agents to inadvertently expose sensitive user data to third-party websites while completing tasks. Testing across Amazon and eBay with 1,080 runs using Browser-Use and AutoGen (backed by GPT-4o, O3, O4-mini)

7m read time From brave.com
Post cover image
Table of contents
The case for Web agentsPrivacy stakes and user expectations in Web agentsPrivacy as disclosure: what and how agents share on the WebOversharing is pervasive and prompt-level mitigation is not enoughPrivacy and utility are not at odds in Web agents

Sort: