As soon as I could finally experiment with Auto Browse for real (this time), I used Google’s list of suggested online tasks to choose those that would help me in my daily life.
Whenever you interact with generative AI tools, a healthy sense of skepticism—and caution—is critical. Google’s disclaimer is baked right into the search engine. Gemini chatbot It reminds users of its mistakes. Auto Browse takes it a step farther. “Use Gemini carefully and take control if needed,” The chatbot will display the same text in its sidebar each time Auto Browse runs. “You are responsible for Gemini’s actions during tasks.”
It is important to consider security issues before you start. These tools could be compromised. prompt injection attacks On malicious websites The bot is diverted from its mission by these attacks. Outside researchers have not fully examined the vulnerabilities that Google Auto Browse may contain, but it is likely to be comparable with other AI programs which can take control of your PC.
You should also be extra cautious if you use Auto Browse when making purchases. Google uses safeguards that mark certain actions as sensitive, such as buying things or posting to social media. Users must approve these actions before they can continue. But I was still worried about how it would act and the potential havoc that could be wreaked on my life. credit cardTo say nothing about the fact that you have to hand over your financial data to them in the first instance.
This is the first card I received with the prompt:
The SF symphony is on tonight and I’d like to reserve two tickets. The tickets do not need to be at the lowest price, and I am willing to pay more for seats in the orchestra. Choose the two aisle seats.
Google’s AI agent is quite bizarre. It clicks around on the tab. In the first instance, it used Gemini 3 (Google’s latest AI model) to set goals and formulate strategies, for example, getting two rows of aisle seats in a symphony concert. The process is similar to that of a chatbot. “reasoning” modelTalking through possible next steps before proceeding. Next, clicks begin. Users can see each step that the bot makes as it completes a particular task.
Auto Browse performed multi-steps tasks with greater efficiency than the similar tools used by agents that I evaluated last year. It went to the right website, picked the best performance, and selected multiple sections of seats to check availability. The log showed that everything listed was what actually happened.
I received a notification to take over and press the button. After a few minutes, the bot stopped working on the symphony tickets. “order now” button. The AI tool seemed to have delivered my request quickly and efficiently.
If I’d ordered those two seats that Auto Browse recommended for our date to the symphony concert, my boyfriend would have most likely made me sleep on a couch.
