AgentDAM: Privacy Leakage Evaluation for Autonomous Web Agents
Date: 2025-03
Affected: Autonomous web agents, Browser-Use, Operator-style agents
Attack vector: prompt-injection
Category: research
Severity: High

Benchmark that quantifies how often autonomous web agents inappropriately disclose PII when interacting with adversarial websites, revealing pervasive privacy leakage across frontier agents.


Mitigations:

Architectural layers (MAESTRO):