launch in Singapore of Meta Muse,<\/span><\/a> which the company bills as the world\u2019s first personal AI agent built for consumers.<\/p>\nThe agent can connect to services such as Gmail and Google Calendar to help users manage e-mails and schedules and work with shopping and travel platforms.<\/p>\n
But this convenience brings privacy and security risks.<\/p>\n
Depending on the level of access, agents may expose sensitive information, make mistakes or act beyond users\u2019 intentions, the advisory said.<\/p>\n
Some agents continue working in the background, while malicious websites or messages could trick them into taking harmful actions.<\/p>\n
\u201cAI agents can be very useful, but you cannot treat them like human assistants and give them the same broad access to your information and implicit trust,\u201d the advisory said.<\/p>\n
\u201cInstead, grant narrowly scoped permissions, retain control of consequential actions and understand how to revoke access,\u201d it added.<\/p>\n
\u201cYou remain responsible for how you use AI agents, including the actions these agents take on your behalf. Depending on the circumstances and applicable laws, you may also be held liable for these actions.\u201d<\/p>\n
The advisory outlined five precautionary steps, starting with limiting what an agent can access.<\/p>\n
Users should connect only the necessary apps and accounts and, where possible, restrict access to specific information within them. They can start with less sensitive material, such as a secondary e-mail account, to understand how the agent works.<\/p>\n
The advisory recommends avoiding giving agents access to banking, government and healthcare accounts, and checking with employers before connecting work accounts.<\/p>\n
It also cautions against sharing credit card details or authentication credentials, including passwords and one-time passwords (OTPs). This extends to documents, e-mails or messages containing such information.<\/p>\n
An agent connected to an inbox that receives OTPs may be able to read them. Users could consider using a separate e-mail account to receive authentication messages for sensitive accounts.<\/p>\n
The second step is to retain control of important actions, starting with limited or read-only permissions where possible.<\/p>\n
Agents should seek permission before taking actions with significant consequences, such as sending messages, deleting or sharing files or posting publicly. Users should choose one-time approval over an \u201calways-allow\u201d option and check details carefully for high-risk transactions.<\/p>\n
\u201cDo not rely solely on chat instructions to limit your agent\u2019s actions, as these may not always be followed consistently,\u201d the advisory said.<\/p>\n
Instead, users should set permissions through app settings, including those of the services an agent accesses. They should regularly revoke unnecessary permissions and check activity records, as agents may behave inconsistently even when performing similar tasks.<\/p>\n
Third, users should understand how their information is used and stored.<\/p>\n
Information shared directly or obtained through connected accounts may be processed and stored by the agent provider and its partners. Users should check what is collected, who receives it, how long it is retained and what happens after an account is disconnected.<\/p>\n
They should also check whether their information is used to train AI models or personalise advertisements and adjust available settings.<\/p>\n
\u201cMany personal AI agents have persistent memory, and they can create personal profiles of you and your contacts based on your files and interactions,\u201d the advisory said.<\/p>\n
Users should delete stored information that is inaccurate or that they do not want retained or used.<\/p>\n
The fourth step is to guard against scammers and malicious actors, who may target agents through instructions hidden in websites, e-mails, calendar invitations, documents or images.<\/p>\n
These could manipulate agents into making purchases, transferring funds or revealing personal data without the user\u2019s request.<\/p>\n
\u201cThe best protection is to limit what your agent can see or do,\u201d the advisory said.<\/p>\n\nUsers should monitor agents as they browse on their behalf, restrict who can give them instructions, use strong authentication, download agents only from official sources and use only trusted third-party add-ons.<\/p>\n
If something goes wrong, they should stop the agent, disconnect affected accounts and look out for changes they did not make, such as payments, changed settings or e-mail forwarding rules. They should save activity records before deleting suspicious memories, add-ons or tasks, and notify anyone affected.<\/p>\n
Finally, users should consider others whose information an agent may encounter.<\/p>\n