Web Hack List

Preliminary research

Privacy risks of agentic oversharing on the Web (SPILLAGE)

Privacy risks of agentic oversharing on the Web

AI-collected research leads through 22 September 2026, including targeted additions between broader sweeps. Unranked, incomplete, not community-vetted, and subject to change.

SPILLAGE measures what LLM web agents disclose while shopping on Amazon and eBay, along two axes: explicit versus implicit disclosure, and content versus behaviour. 180 tasks over Browser-Use and AutoGen with GPT-4o, o3 and o4-mini, 1,080 runs. Task-irrelevant facts leak into search strings and into clicks and form choices, with behavioural oversharing dominating; prompt-level instructions to be private do not stop it, and stripping irrelevant input raised task success by up to 17.9%.

Record

Document
Privacy risks of agentic oversharing on the Web
Researcher
Ali Shahin Shamsabadi
Published by
Brave
Date
Topic
AI

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of Ali Shahin Shamsabadi, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .