Characterizing Unintended Consequences in Human-GUI Agent Collaboration for Web Browsing
On the map: LLM agents and tool use → GUI and mobile agents
Abstract (arXiv)
The proliferation of Large Language Model (LLM)-based Graphical User Interface (GUI) agents in web browsing scenarios present complex unintended consequences (UCs). This paper characterizes three UCs from three perspectives: phenomena, influence and mitigation, drawing on social media analysis (N=221 posts) and semi-structured interviews (N=14). Key phenomenon for UCs include agents' deficiencies in comprehending instructions and planning tasks, challenges in executing accurate GUI interactions and adapting to dynamic interfaces, the generation of unreliable or misaligned outputs, and shortcomings in error handling and feedback processing. These phenomena manifest as influences from unanticipated actions and user frustration, to privacy violations and security vulnerabilities, and further to eroded trust and wider ethical concerns. Our analysis also identifies user-initiated mitigation, such as technical adjustments and manual oversight, and provides implications for designing future LLM-based GUI agents that are robust, user-centric, and transparent, fostering a crucial balance between automation and human oversight.
Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Placed in GUI and mobile agents, one of 16 directions in LLM agents and tool use. Builds on 22 of its 78 references that are in the map. First posted on arXiv 15 May 2025.
Builds on
22 of 78 references.
Closest ancestors · 5
Same direction, newest first
- 2025Towards Trustworthy GUI Agents: A Survey30 Mar
- 2024Large Language Model-Brained GUI Agents: A Survey27 Nov
- 2024The Dawn of GUI Agent: A Preliminary Case Study with Claude 3.5 Computer Use15 Nov
- 2024GUI Agents with Foundation Models: A Comprehensive Survey7 Nov
- 2023AppAgent: Multimodal Agents as Smartphone Users21 Dec
Other references · 17
- 2023Generative Agents: Interactive Simulacra of Human Behaviorcited by 3,568
- 2023ChatDev: Communicative Agents for Software Developmentcited by 919
- 2024A Survey on the Memory Mechanism of Large Language Model based Agentscited by 634
- 2023Identifying the Risks of LM Agents with an LM-Emulated Sandboxcited by 548
- 2023How Language Model Hallucinations Can Snowballcited by 311
- 2024Personal LLM Agents: Insights and Survey about the Capability, Efficiency and Securitycited by 260
- 2024AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathwayscited by 127
- 2024AirGapAgent: Protecting Privacy-Conscious Conversational Agentscited by 94
- 2025The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injectionscited by 59
- 2024Risks of AI Scientists: Prioritizing Safeguarding Over Autonomycited by 49
- 2023Computers as Bad Social Actors: Dark Patterns and Anti-Patterns in Interfaces that Act Sociallycited by 20
- 2023An Empathy-Based Sandbox Approach to Bridge the Privacy Gap among Attitudes, Goals, Knowledge, and Behaviorscited by 18
5 more
- 2021How the Design of YouTube Influences User Sense of Agencycited by 12
- 2024"Ghost of the past": identifying and resolving privacy leakage from LLM's memory through proactive user interactioncited by 10
- 2024Prompt2Task: Automating UI Tasks on Smartphones from Textual Promptscited by 8
- 2024Adanonymizer: Interactively Navigating and Balancing the Duality of Privacy and Output Performance in Human-LLM Interactioncited by 6
- 2025The Hall of AI Fears and Hopes: Comparing the Views of AI Influencers and those of Members of the U.S. Public Through an Interactive Platformcited by 2
Built on by
Citing papers per year: 2025: 5; 2026: 2.
7 papers.
- 2025A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?cited by 23
- 2025Dark Patterns Meet GUI Agents: LLM Agent Susceptibility to Manipulative Interfaces and the Role of Human Oversightcited by 16
- 2025A Call for Collaborative Intelligence: Why Human-Agent Systems Should Precede AI Autonomycited by 9
- 2026Comparing Human Oversight Strategies for Computer-Use Agentscited by 6
- 2025ALLOY: Generating Reusable Agent Workflows from User Demonstrationcited by 3
- 2026Software Engineering for and with GUI Agentcited by 1
- 2025Toward Autonomous UI Exploration: The UIExplorer Benchmarkcited by 0
- 2026Software Engineering for and with GUI Agent10 Aug 2026
- 2026Comparing Human Oversight Strategies for Computer-Use Agents6 Apr 2026
- 2025ALLOY: Generating Reusable Agent Workflows from User Demonstration11 Oct 2025
- 2025Dark Patterns Meet GUI Agents: LLM Agent Susceptibility to Manipulative Interfaces and the Role of Human Oversight12 Sep 2025
- 2025Toward Autonomous UI Exploration: The UIExplorer Benchmark21 Jun 2025
- 2025A Call for Collaborative Intelligence: Why Human-Agent Systems Should Precede AI Autonomy11 Jun 2025
- 2025A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?16 May 2025
Similar, not cited
Close in wording, no citation either way
- 2025Toward a Human-Centered Evaluation Framework for Trustworthy LLM-Powered GUI Agents
- 2026A Dual-Process Perspective on Nudge Susceptibility in LLM-Based GUI Agents
- 2026The Behavioral Fabric of LLM-Powered GUI Agents: Human Values and Interaction Outcomes
- 2025Building Browser Agents: Architecture, Security, and Practical Solutions
- 2026Mapping the Design Space of User Experience for Computer Use Agents
- 2026Delegating or Doing? Understanding User Behavior in Hybrid Human-Agent Interfaces
- 2025A Survey on (M)LLM-Based GUI Agents
- 2026GUIDE: A Benchmark for Understanding and Assisting Users in Open-Ended GUI Tasks