OS-HARM: Benchmark for Safety of Computer-Use Agents
Date: 2025-06
Affected: Computer-use agents (Anthropic Computer Use, Operator-style)
Attack vector: prompt-injection
Category: research
Severity: High

Kuntz et al. introduce OS-HARM, an operating-system-level safety benchmark for computer-use agents covering harmful misuse, prompt injection, and unintended over-action across 150 tasks.


Mitigations:

Architectural layers (MAESTRO):