SPIDES: Information-Flow Control for Browser Agents.

arXiv:2610.24277v1 Announce Type: cross Abstract: Browser agents automate complex workflows by reading and acting on arbitrary page content, but this flexibility exposes them to prompt injection attacks and unintended data exfiltration. Recent work argues that