{"id":"https://openalex.org/W7165692780","doi":"https://doi.org/10.48550/arxiv.2606.23189","title":"Capable but Careless: Do Computer-Use Agents Follow Contextual Integrity?","display_name":"Capable but Careless: Do Computer-Use Agents Follow Contextual Integrity?","publication_year":2026,"publication_date":"2026-06-22","ids":{"openalex":"https://openalex.org/W7165692780","doi":"https://doi.org/10.48550/arxiv.2606.23189"},"language":"en","primary_location":{"id":"pmh:oai:tubiblio.ulb.tu-darmstadt.de:161173","is_oa":false,"landing_page_url":"http://tubiblio.ulb.tu-darmstadt.de/view/person/Goel=3AAnmol=3A=3A.html>","pdf_url":null,"source":{"id":"https://openalex.org/S4377196390","display_name":"TUbilio (Technical University of Darmstadt)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I31512782","host_organization_name":"Technische Universit\u00e4t Darmstadt","host_organization_lineage":["https://openalex.org/I31512782"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"Report"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.23189","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5139143160","display_name":"Anmol Goel","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Goel, Anmol","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5027450194","display_name":"Iryna Gurevych","orcid":"https://orcid.org/0000-0003-2187-7621"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gurevych, Iryna","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.1445000022649765,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.1445000022649765,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12607","display_name":"Personal Information Management and User Behavior","score":0.1216999962925911,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.07649999856948853,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/safer","display_name":"SAFER","score":0.8398000001907349},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.5900999903678894},{"id":"https://openalex.org/keywords/information-leakage","display_name":"Information leakage","score":0.36500000953674316},{"id":"https://openalex.org/keywords/private-information-retrieval","display_name":"Private information retrieval","score":0.3521000146865845},{"id":"https://openalex.org/keywords/position","display_name":"Position (finance)","score":0.34209999442100525},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.34150001406669617}],"concepts":[{"id":"https://openalex.org/C2776654903","wikidata":"https://www.wikidata.org/wiki/Q2601463","display_name":"SAFER","level":2,"score":0.8398000001907349},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.5900999903678894},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5439000129699707},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.5184999704360962},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4481000006198883},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.41839998960494995},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.36500000953674316},{"id":"https://openalex.org/C99221444","wikidata":"https://www.wikidata.org/wiki/Q1532069","display_name":"Private information retrieval","level":2,"score":0.3521000146865845},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3472000062465668},{"id":"https://openalex.org/C198082294","wikidata":"https://www.wikidata.org/wiki/Q3399648","display_name":"Position (finance)","level":2,"score":0.34209999442100525},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.34150001406669617},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.3230000138282776},{"id":"https://openalex.org/C169093310","wikidata":"https://www.wikidata.org/wiki/Q3702971","display_name":"Personally identifiable information","level":2,"score":0.2888999879360199},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.2842999994754791},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.2824000120162964},{"id":"https://openalex.org/C2777042071","wikidata":"https://www.wikidata.org/wiki/Q6509304","display_name":"Leakage (economics)","level":2,"score":0.2711000144481659},{"id":"https://openalex.org/C2777267654","wikidata":"https://www.wikidata.org/wiki/Q3519023","display_name":"Test (biology)","level":2,"score":0.2644999921321869},{"id":"https://openalex.org/C2778571376","wikidata":"https://www.wikidata.org/wiki/Q1355821","display_name":"Frontier","level":2,"score":0.26409998536109924},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.25859999656677246}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:tubiblio.ulb.tu-darmstadt.de:161173","is_oa":false,"landing_page_url":"http://tubiblio.ulb.tu-darmstadt.de/view/person/Goel=3AAnmol=3A=3A.html>","pdf_url":null,"source":{"id":"https://openalex.org/S4377196390","display_name":"TUbilio (Technical University of Darmstadt)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I31512782","host_organization_name":"Technische Universit\u00e4t Darmstadt","host_organization_lineage":["https://openalex.org/I31512782"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"Report"},{"id":"doi:10.48550/arxiv.2606.23189","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.23189","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.23189","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.23189","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.7119956016540527,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Computer-use":[0],"agents":[1,134,164,184],"(CUAs)":[2],"now":[3],"act":[4,165],"on":[5,146],"a":[6,28,137,191],"user's":[7],"behalf":[8],"across":[9],"personal":[10,106],"applications":[11],"such":[12],"as":[13,190],"email,":[14],"calendars,":[15],"and":[16,114,135,158,185],"to-do":[17],"lists.":[18],"This":[19],"cross-application":[20],"access":[21],"is":[22,51,128],"useful,":[23],"but":[24],"it":[25,43,127],"also":[26],"creates":[27],"privacy":[29],"risk":[30,66],"that":[31,50,54,63,89],"has":[32],"been":[33],"largely":[34],"overlooked:":[35],"when":[36,163],"an":[37,60,111,123,153],"agent":[38,84,103,119],"works":[39],"in":[40,46,53,78,86,96,108,167],"one":[41],"context,":[42],"can":[44],"pull":[45],"information":[47],"from":[48],"another":[49],"inappropriate":[52],"context.":[55],"Hence,":[56],"we":[57],"introduce":[58],"AgentCIBench,":[59],"evaluation":[61],"harness":[62],"turns":[64],"this":[65],"into":[67],"executable,":[68],"deterministically":[69],"scored":[70],"scenarios.":[71],"We":[72,130,174],"target":[73,95],"three":[74],"common":[75],"failure":[76,140],"modes":[77],"CUAs:":[79],"visual":[80],"co-location,":[81],"where":[82,101,117],"the":[83,93,97,102,118,159,168,172,179],"pulls":[85],"prohibited":[87],"items":[88],"sit":[90],"next":[91],"to":[92,110,122,170,177],"task":[94],"UI;":[98],"task-ambiguity":[99],"overshare,":[100],"dumps":[104],"dense":[105],"state":[107],"response":[109],"under-specified":[112],"prompt;":[113],"recipient":[115],"misalignment,":[116],"sends":[120],"content":[121],"addressee":[124],"for":[125],"whom":[126],"inappropriate.":[129],"evaluate":[131],"15":[132,144],"frontier":[133],"find":[136],"surprisingly":[138],"high":[139],"rate:":[141],"11":[142],"of":[143,150,156,181],"leak":[145],"more":[147],"than":[148],"50%":[149],"scenarios,":[151],"with":[152],"average":[154],"leakage":[155],"67.9%,":[157],"same":[160],"failures":[161],"persist":[162],"end-to-end":[166],"environment":[169],"complete":[171],"task.":[173],"release":[175],"AgentCIBench":[176],"encourage":[178],"development":[180],"safer":[182],"computer-use":[183],"position":[186],"contextual":[187],"disclosure":[188],"testing":[189],"pre-deployment":[192],"safety":[193],"check.":[194]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-06-24T00:00:00"}