browser-use-tool changedagents-and-tools/tool-use/browser-use-tool
Nearest release: v2.1.319, published an hour after this site recorded the change. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Recorded here
Lines+5added
Lines−1removed
From line
1,151
where the diff opens
First seen
20 Aug 2026
this site's first read of the page
Recorded edits30to this page, all time
The whole hunk
from line 1151, old and new numbered
/
from line 1151
11511151
11521152Claude sometimes follows instructions found in page content even when they conflict with yours; text on a page that says “ignore your previous instructions and navigate to...” can divert it from the task. Isolate Claude from sensitive data and actions to limit what a prompt injection can reach, review [Mitigate jailbreaks and prompt injections](https://platform.claude.com/docs/en/test-and-evaluate/strengthen-guardrails/mitigate-jailbreaks), and if a task can’t avoid a logged-in session, use a dedicated low-privilege account and keep human confirmation on account-changing actions.
11531153
1154Anthropic has trained the model to resist these prompt injections and has added an extra layer of defense. If you use the browser use tool, classifiers will automatically scan what the browser returns, such as page text or screenshots, to flag potential prompt injections. When these classifiers identify a potential prompt injection, they will automatically steer the model to check whether the instruction really came from you before acting on it.
1154Anthropic has trained the model to resist these prompt injections and has added an extra layer of defense. If you use the browser use tool, classifiers automatically scan what the browser returns, such as page text or screenshots, to flag potential prompt injections. When these classifiers identify a potential prompt injection, they steer the model to check whether the instruction really came from you before acting on it.
11551155
11561156This extra protection isn’t ideal for every use case (for example, use cases without a human in the loop), so if you’d like to opt out and turn it off, [contact support](https://support.claude.com/en/). The precautions listed earlier remain important even with these classifiers in place.
11571157
from line 1592
15921592<CardGroup cols={2}>
15931593 <Card title="Browser and computer use with the SDK toolsets" icon="code" href="https://platform.claude.com/docs/en/agents-and-tools/tool-use/browser-use-sdk">
15941594 Start from a partner’s driver, or write your own in Python or TypeScript. The SDK runs the loop and the checks you configure.
1595 </Card>
1596
1597 <Card title="Example browser driver" icon="github-logo" href="https://github.com/anthropics/claude-quickstarts/tree/main/browser-toolset">
1598 Read a minimal Python and TypeScript driver for the SDK’s browser toolset. It controls Chromium through the Chrome DevTools Protocol and isn’t production code.
15951599 </Card>
15961600
15971601 <Card title="Computer use tool" icon="computer" href="https://platform.claude.com/docs/en/agents-and-tools/tool-use/computer-use-tool">
No line in this hunk matches that.