Google has officially integrated native “computer use” capabilities into Gemini 3.5 Flash, transitioning the feature from a standalone experimental model into a core, built-in tool. This upgrade allows the model to see, interpret, and autonomously interact with digital interfaces just like a human operator. [1, 2, 3]

By blending its large 1-million-token context window with intent-based visual actions, Gemini 3.5 Flash is highly optimized for complex, long-horizon automation workflows. [2, 4]

• Cross-Platform Execution: Custom agents can interact seamlessly across browser, mobile, and desktop environments (ENVIRONMENT_BROWSER, ENVIRONMENT_MOBILE, ENVIRONMENT_DESKTOP). [5, 6]
• Intent-Based Interaction: The model takes screenshots of the active environment, identifies interactive UI components (buttons, text boxes, sliders), and executes actions like clicking, typing, or scrolling. [2, 4]
• Adjustable Thinking Levels: Developers can fine-tune the depth of the model’s reasoning loops to optimally balance processing quality, cost constraints, and execution latency. [2, 5]
• Human-in-the-Loop (HITL): Supports highly customizable client-side functions, making it simple to hand over control to a human supervisor for manual intervention when necessary. [7]

Google’s implementation strategy prioritizes high throughput and affordability for enterprise automation: [2, 4]

• Benchmark Performance: Gemini 3.5 Flash scores 78.4 on the OSWorld-Verified leaderboard, placing it virtually neck-and-neck with premium frontier models like GPT-5.5 (78.7). [2]
• Speed Superiority: Processing at roughly 289 tokens per second, it operates nearly four times faster than competing frontier models. [4]
• Aggressive Pricing: Priced at $1.50 per million input tokens and $9 per million output tokens, it is less than half the operating cost of comparable industry alternatives. [4]

Operating an operating system autonomously poses severe prompt-injection risks. Google has integrated targeted adversarial training alongside two optional enterprise safeguards: [2, 8]

1. Explicit Confirmation Prompts: Forces the agent to halt and request human validation before executing irreversible operations, such as completing financial purchases or deleting records. [2, 9]
2. Indirect Prompt Injection Filters: An automated monitoring layer that instantly terminates active workflows if it detects hidden malicious instructions embedded within web pages or document layouts. [2, 4]

The feature is globally accessible through the Gemini API on Google AI Studio and the Gemini Enterprise Agent Platform. [2, 5]

Developers looking to experiment can explore Google’s official GitHub reference implementation or utilize the web-agent testing environment provided via partnership with Browserbase. The basic developer loop follows four key states: sending a task request → receiving the structured UI actions → executing the inputs via automated testing frameworks like Playwright → capturing and feeding back the new screenshot state. [2, 5, 10, 11]

If you are looking to build or integrate an agent, tell me:

• What specific operating system or browser environment are you targeting?
• What is the primary automation use case (e.g., continuous QA testing, form filling, data scraping)?

Introducing computer