Google DeepMind 将 computer use 内置进 Gemini 3.5 Flash，可直接构建操作电脑的智能体
Introducing computer use in Gemini 3.5 Flash
- 1computer use 并入 Gemini 3.5 Flash 成内置工具，此前仅以独立的 Gemini 2.5 computer use 模型提供
- 2开发者可构建跨浏览器、移动和桌面环境执行操作的智能体，经 Gemini API 与 Gemini Enterprise Agent Platform 使用
- 3官方针对提示注入风险采用对抗训练，并推出敏感操作需用户确认、检出间接注入自动停止任务两项可选企业防护
- 4官方称适用持续软件测试、专业应用知识工作等长程企业自动化任务，Browserbase 演示环境可先行试用
computer use 从独立模型并入主力 Flash 型号，操作电脑的智能体成为 Gemini 标准内置能力，企业防护选项同步提供。
- 影响：软件测试、知识工作等自动化流程可收敛到单一 Flash 接口，减少维护多套模型的成本；智能体在真实环境操作仍面临提示注入风险，需搭配沙箱与人工确认；两项防护为可选项，启用策略会直接影响上线节奏。
- 参考：可考虑先在 Browserbase 托管的演示环境跑一条自家浏览器操作流程，再评估接入成本；值得按官方最佳实践文档盘点敏感与不可逆操作清单，决定哪些环节强制人工确认。
- 依据：以上依据 Google DeepMind 官方博客，性能与安全能力均为官方口径，暂无独立评测；可用入口与防护配置以官方文档为准。
Jun 24, 2026
|
Computer use is now a built-in tool in Gemini 3.5 Flash to build agents that can interact across platforms.
Mateo Quiros
Product Manager, Google DeepMind
Listen to article
[[duration]] minutes
This content is generated by Google AI. Generative AI is experimental
Computer use is now a built-in tool supported in Gemini 3.5 Flash, delivering our best performance yet for agentic computer use tasks. Previously only available as a standalone Gemini 2.5 computer use model, computer use is now integrated natively in the main Gemini Flash model. Gemini already excels at function calling and using built-in tools like Search and Maps grounding. With built-in computer use capability, developers can now use 3.5 Flash to reliably build custom agents that can see, reason and take action across browser, mobile and desktop environments. This unlocks improved performance for long-horizon and enterprise automation tasks like continuous software testing and knowledge work across professional applications.
Developers and enterprises can start using computer use in 3.5 Flash via the Gemini API and Gemini Enterprise Agent Platform.
Making computer use safe in 3.5 Flash
To mitigate some of the prompt injection risks for agents operating in live environments, we use targeted adversarial training for computer use in Gemini 3.5 Flash. We’re also releasing two optional enterprise safeguard systems that enable enterprises to:
- Require explicit user confirmation for sensitive or irreversible actions.
- Automatically stop tasks if an indirect prompt injection is identified.
Taking a “defense-in-depth” approach, we encourage developers to combine these features with secure sandboxing, human-in-the-loop verification and strict access controls. Additional information on safety measures can be found in our best practices documentation.
We are already seeing customers drive value with computer use. Here’s what some of them have to say:
To start building with computer use today:
- Try it now: Test the capabilities in a demo environment hosted by Browserbase.
- Start building: Dive into our reference implementation and documentation via Gemini API and Gemini Enterprise Agent Platform.
Get the latest news from Google in your inbox
Sign up for our newsletters with product updates, event information, special offers, and more.
Your information will be used in accordance with Google's privacy policy. You may opt out at any time.
来源：Google DeepMind：Blog · deepmind.google