OS-SPEAR: A Toolkit for the Safety, Performance,Efficiency, and Robustness Analysis of OS Agents
On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness
also in 1 more
Abstract (arXiv)
The evolution of Multimodal Large Language Models (MLLMs) has shifted the focus from text generation to active behavioral execution, particularly via OS agents navigating complex GUIs. However, the transition of these agents into trustworthy daily partners is hindered by a lack of rigorous evaluation regarding safety, efficiency, and multi-modal robustness. Current benchmarks suffer from narrow safety scenarios, noisy trajectory labeling, and limited robustness metrics. To bridge this gap, we propose OS-SPEAR, a comprehensive toolkit for the systematic analysis of OS agents across four dimensions: Safety, Performance, Efficiency, and Robustness. OS-SPEAR introduces four specialized subsets: (1) a S(afety)-subset encompassing diverse environment- and human-induced hazards; (2) a P(erformance)-subset curated via trajectory value estimation and stratified sampling; (3) an E(fficiency)-subset quantifying performance through the dual lenses of temporal latency and token consumption; and (4) a R(obustness)-subset that applies cross-modal disturbances to both visual and textual inputs. Additionally, we provide an automated analysis tool to generate human-readable diagnostic reports. We conduct an extensive evaluation of 22 popular OS agents using OS-SPEAR. Our empirical results reveal critical insights into the current landscape: notably, a prevalent trade-off between efficiency and safety or robustness, the performance superiority of specialized agents over general-purpose models, and varying robustness vulnerabilities across different modalities. By providing a multidimensional ranking and a standardized evaluation framework, OS-SPEAR offers a foundational resource for developing the next generation of reliable and efficient OS agents. The dataset and codes are available at https://github.com/Wuzheng02/OS-SPEAR.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 82 of its 94 references that are in the map. First posted on arXiv 27 Apr 2026.
Builds on
82 of 94 references.
Closest ancestors · 1
Same direction, newest first
Other references · 81
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,355
- 2025Qwen2.5-VL Technical Reportcited by 5,418
- 2025Qwen3-VL Technical Reportcited by 2,534
- 2023WebArena: A Realistic Web Environment for Building Autonomous Agentscited by 1,908
- 2023Mind2Web: Towards a Generalist Agent for the Webcited by 1,210
- 2022WebShop: Towards Scalable Real-World Web Interaction with Grounded Language Agentscited by 1,197
- 2024OSWorld: Benchmarking Multimodal Agents for Open-Ended Tasks in Real Computer Environmentscited by 1,134
- 2025UI-TARS: Pioneering Automated GUI Interaction with Native Agentscited by 584
- 2024SeeClick: Harnessing GUI Grounding for Advanced Visual GUI Agentscited by 553
- 2024AndroidWorld: A Dynamic Benchmarking Environment for Autonomous Agentscited by 450
- 2025GLM-4.5V and GLM-4.1V-Thinking: Towards Versatile Multimodal Reasoning with Scalable Reinforcement Learningcited by 439
38 more
- 2023AppAgent: Multimodal Agents as Smartphone Userscited by 407
- 2024OS-ATLAS: A Foundation Action Model for Generalist GUI Agentscited by 370
- 2024Agent-SafetyBench: Evaluating the Safety of LLM Agentscited by 280
- 2025ScreenSpot-Pro: GUI Grounding for Professional High-Resolution Computer Usecited by 246
- 2025GUI-R1 : A Generalist R1-Style Vision-Language Action Model For GUI Agentscited by 240
- 2024GUIOdyssey: A Comprehensive Dataset for Cross-App GUI Navigation on Mobile Devicescited by 190
- 2024On the Effects of Data Scale on UI Control Agentscited by 187
- 2023You Only Look at Screens: Multimodal Chain-of-Action Agentscited by 185
- 2025Mobile-Agent-v3: Fundamental Agents for GUI Automationcited by 183
- 2025UI-R1: Enhancing Efficient Action Prediction of GUI Agents by Reinforcement Learningcited by 166
- 2024Android in the Zoo: Chain-of-Action-Thought for GUI Agentscited by 156
- 2025Agent S2: A Compositional Generalist-Specialist Framework for Computer Use Agentscited by 156
- 2025InfiGUI-R1: Advancing Multimodal GUI Agents from Reactive Actors to Deliberative Reasonerscited by 140
- 2025WASP: Benchmarking Web Agent Security Against Prompt Injection Attackscited by 140
- 2024GUI Agents with Foundation Models: A Comprehensive Surveycited by 110
- 2024AndroidLab: Training and Systematic Benchmarking of Android Autonomous Agentscited by 105
- 2025OS-Harm: A Benchmark for Measuring Safety of Computer Use Agentscited by 104
- 2024GUI Agents: A Surveycited by 101
- 2024AI Hospital: Benchmarking Large Language Models in a Multi-agent Medical Interaction Simulatorcited by 99
- 2025LLM Social Simulations Are a Promising Research Methodcited by 97
- 2025UI-Venus Technical Report: Building High-performance UI Agents with RFTcited by 90
- 2025MAI-UI Technical Report: Real-World Centric Foundation GUI Agentscited by 88
- 2024Proactive Agent: Shifting LLM Agents from Reactive Responses to Active Assistancecited by 84
- 2025PlanGenLLMs: A Modern Survey of LLM Planning Capabilitiescited by 82
- 2025Enhancing Visual Grounding for GUI Agents via Self-Evolutionary Reinforcement Learningcited by 79
- 2025Mind2Web 2: Evaluating Agentic Search with Agent-as-a-Judgecited by 75
- 2025GUI-G1: Understanding R1-Zero-Like Training for Visual Grounding in GUI Agentscited by 73
- 2025MedAgent-Pro: Towards Evidence-based Multi-modal Medical Diagnosis via Reasoning Agentic Workflowcited by 71
- 2024CoCo-Agent: A Comprehensive Cognitive MLLM Agent for Smartphone GUI Automationcited by 70
- 2025MMBench-GUI: Hierarchical Multi-Platform Evaluation Framework for GUI Agentscited by 64
- 2025GUI-G2: Gaussian Reward Modeling for GUI Groundingcited by 60
- 2023PerceptionGPT: Effectively Fusing Visual Perception into LLMcited by 59
- 2024Mobile-Bench: An Evaluation Benchmark for LLM-based Mobile Agentscited by 56
- 2024Determinants of LLM-assisted Decision-Makingcited by 55
- 2024Caution for the Environment: Multimodal LLM Agents are Susceptible to Environmental Distractionscited by 55
- 2025MobileGUI-RL: Advancing Mobile GUI Agent through Reinforcement Learning in Online Environmentcited by 51
- 2024Vitron: A Unified Pixel-level Vision LLM for Understanding, Generating, Segmenting, Editingcited by 49
- 2025Commercial LLM Agents Are Already Vulnerable to Simple Yet Dangerous Attackscited by 49
50 most cited of 81 All 81 (JSON)
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2024Windows Agent Arena: Evaluating Multi-Modal OS Agents at Scale
- 2025RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents
- 2026OS-Symphony: A Holistic Framework for Robust and Generalist Computer-Using Agent
- 2024Multimodal Situational Safety
- 2026LITMUS: Benchmarking Behavioral Jailbreaks of LLM Agents in Real OS Environments
- 2026BLINDSPOT: A Benchmark for Safety and Refusal Calibration in Long-Horizon Tool-Using Agents
- 2026OOD-MMSafe: Advancing MLLM Safety from Harmful Intent to Hidden Consequences
- 2024SafeAgentBench: A Benchmark for Safe Task Planning of Embodied LLM Agents