OpenAI запустила «агента» ChatGPT, который умеет не только генерировать текст, но и управлять вашим ПК! 💻 Новый функционал позволяет ИИ самостоятельно: искать инфу в интернете, создавать презентации, заполнять таблицы и даже планировать задачи. Это гигантский шаг к полноценным ИИ-ассистентам. Но эксперты уже бьют тревогу: 🤔 а если агент ошибётся или его взломают? Риски приватности и безопасности огромны. Тестируют пока ограниченный круг юзеров. Готовы ли вы доверить ИИ контроль над своим рабочим столом? 👀 #AI #OpenAI #Кибербезопасность
Use Your Illusion ChatGPT’s new AI agent can browse the web and create PowerPoint slideshows New «agentic» AI feature combines web browsing with task-execution abilities. Benj Edwards – Jul 17, 2025 4:41 pm | 20 Credit: josefkubes via Getty Images Credit: josefkubes via Getty Images Text settings Story text Size Small Standard Large Width
- Standard Wide Links Standard Orange
- Subscribers only Learn more Minimize to nav On Thursday, OpenAI launched ChatGPT Agent , a new feature that lets the company’s AI assistant complete multi-step tasks by controlling its own web browser. The update merges capabilities from OpenAI’s earlier Operator tool and the Deep Research feature, allowing ChatGPT to navigate websites, run code, and create documents while users maintain control over the process. The feature marks OpenAI’s latest entry into what the tech industry calls » agentic AI «—systems that can take autonomous multi-step actions on behalf of the user. OpenAI says users can ask Agent to handle requests like assembling and purchasing a clothing outfit for a particular occasion, creating PowerPoint slide decks, planning meals, or updating financial spreadsheets with new data. The system uses a combination of web browsers, terminal access, and API connections to complete these tasks, including «ChatGPT Connectors» that integrate with apps like Gmail and GitHub. While using Agent, users watch a window inside the ChatGPT interface that shows all of the AI’s actions taking place inside its own private sandbox. This sandbox features its own virtual operating system and web browser with access to the real Internet; it does not control your personal device. «ChatGPT carries out these tasks using its own virtual computer,» OpenAI writes, «fluidly shifting between reasoning and action to handle complex workflows from start to finish, all based on your instructions.» A still image from an OpenAI ChatGPT Agent promotional demo video showing the AI agent searching for flights. Credit: OpenAI Like Operator before it, the agent feature requires user permission before taking certain actions with real-world consequences, such as making purchases. Users can interrupt tasks at any point, take control of the browser, or stop operations entirely. The system also includes a «Watch Mode» for tasks like sending emails that require active user oversight. Since Agent surpasses Operator in capability, OpenAI says the company’s earlier Operator preview site will remain functional for a few more weeks before being shut down. Performance claims OpenAI’s claims are one thing, but how well the company’s new AI agent will actually complete multi-step tasks will vary wildly depending on the situation. That’s because the AI model isn’t a complete form of problem-solving intelligence, but rather a complex master imitator. It has some flexibility in piecing a scenario together but also many blind spots. OpenAI trained the agent (and its constituent components ) using examples of computer usage and tool usage; whatever falls outside of the examples absorbed from training data will likely still prove difficult to accomplish. For example, the ChatGPT Agent System Card shows that the agent can fail at complex tasks that require chaining together many steps in a novel way. In a «Cyber Range» evaluation, the agent was tasked with conducting a full-scale operation in a simulated network designed to mimic a small online retailer. When left to solve the problem on its own, the agent was unable to complete the task. While it could successfully perform initial research steps, like identifying servers on the network, it struggled to proceed beyond that and was unable to chain together the necessary exploits to reach the final goal. Even when provided with hints, the agent still failed (which in this case might be good, since it couldn’t perform an automated hack), this demonstrates a clear limitation in its ability to solve complex problems that fall outside of its familiar training examples. OpenAI writes, «The SpreadsheetBench authors used a Windows environment using Microsoft Excel to evaluate spreadsheets. We used an OSX environment and LibreOffice, which may result in small grading differences. For example, the authors found an Overall Hard restriction of 15.02% for GPT‑4o, and we obtained 13.38%. We used the complete 912-question benchmark.» Credit: OpenAi Even so, OpenAI reports that ChatGPT agent achieves state-of-the-art performance on its own benchmark measurements, which should always be taken with a grain of salt until verified by impartial third parties. On Humanity’s Last Exam , which tests AI performance on expert-level questions, the model scored 41.6 percent accuracy (compare that to OpenAI o3’s 24.9 percent using tools). On FrontierMath , one of the most difficult math benchmarks yet devised, it reaches 27.4 percent accuracy with tool access (o3 with Python scored 19.3 percent). The company also claims the system outperforms humans on certain data science tasks like data analysis and modeling (such as creating forecasts or predictive models). On DSBench , a benchmark that seeks to measure that capability, ChatGPT agent scored 89.9 percent on data analysis tasks compared to 64.1 percent for humans, and 85.5 percent on data modeling tasks versus 65.0 percent for humans. The agent also scored 68.9 percent on OpenAI’s BrowseComp for finding hard-to-locate web information and 45.5 percent on SpreadsheetBench for editing spreadsheets, which is higher than OpenAI’s other AI models. It’s worth noting that even though OpenAI says Agent can craft PowerPoint slide decks for users, the company acknowledged that slideshow generation is still in beta and outputs can feel «rudimentary in formatting and polish.» Safety and privacy OpenAI admits that the launch introduces new security considerations. Because ChatGPT Agent can take direct actions on websites and access user data through connected services, it is vulnerable to prompt injection attacks —attempts by hackers to manipulate the AI’s behavior through instructions that misdirect the AI model (in this case, likely through hidden instructions on web pages). For example, a site might have an invisible form field that instructs the AI model to enter your credit card information without your knowledge. OpenAI says it has implemented safeguards against prompt injections by training the model to identify and «resist» these attacks while requiring user confirmation for consequential or suspicious-looking actions. The model is also trained to actively refuse high-risk tasks such as bank transfers. During a livestream on Thursday, one OpenAI engineer characterized Agent as a system of AI models working together, some of which constantly monitor the other models’ behavior for suspicious activity. Those overseers can hypothetically halt a process if they spot a potentially dangerous scenario. As for privacy, since Agent runs in a virtual machine on OpenAI’s servers, users won’t need to worry about the bot having access to local private data stored on their device. But what you feed into ChatGPT Agent could still be shared on the web during its operations. Beyond that, OpenAI says privacy controls for the new agent allow users to delete all browsing data and log out of active sessions with one click. When users take control of the browser in «takeover mode,» OpenAI states it does not collect or store data entered during these sessions, including passwords. Agent launches today for ChatGPT Pro users, who receive 400 messages per month. Plus and Team subscribers will gain access over the next few days with 40 monthly messages. Enterprise and Education users will receive access in the coming weeks. The feature is not yet available in the European Economic Area and Switzerland. We’ve not yet used ChatGPT Agent ourselves, but we may follow up with our experiences at a later date. Benj Edwards Senior AI Reporter Benj Edwards Senior AI Reporter Benj Edwards is Ars Technica’s Senior AI Reporter and founder of the site’s dedicated AI beat in 2022. He’s also a tech historian with almost two decades of experience. In his free time, he writes and records music, collects vintage computers, and enjoys nature. He lives in Raleigh, NC. 20 Comments
