Most AI mannequin suppliers are at present growing agentic merchandise primarily based on a browser platform, a extremely sandboxed atmosphere that’s strongly insulated from the underlying working system, he identified. Which means that whereas agentic AI browsers have their very own vulnerabilities, compromising a browser doesn’t give entry to the underlying file system, or present the power to execute distant code straight on the underlying OS.
“Claude, nevertheless, does issues in a different way,” Arazi stated. “It’s a browser extension at present solely on Chrome, with a paired MCP-based desktop agent. Though a few of the browser options reminiscent of Dia, Microsoft and Google are usually not but totally agentic, Claude’s resolution is really agentic.” Not like browsers, it does have direct entry to the file system so the mixture of full agentic capabilities and direct file system entry creates a harmful mixture, he famous. “That is why it’s particularly an issue of Anthropic’s implementation, that different agentic browsers should not have.”
Onus on customers, says Anthropic
Anthropic confirmed a lot of the report, however stated that the onus is on customers to make use of the merchandise correctly, primarily based on their environments.



