Yes, but not "install and take over the whole computer." Doubao Work official website lists computer and browser operations as product capabilities. How far you can actually perform depends on the client version, system permissions, the files or pages you select, and the confirmation steps in the task. The safest approach is to treat it like a digital colleague that needs to clearly define the workstation and access control.
First, understand what it will encounter
Computer Agent not only generates text but can also read the current page, open files, click buttons, fill out forms, or write results back into documents. They are suitable for cross-page data collection, organizing local files, repeatedly entering documents, and producing office outputs, but the cost of misjudgments is higher than ordinary Q&A: a mistaken statement can be deleted, but a single mistaken submission or overwriting file may not be easy to recover.
Doubao's current privacy policy explains that quick screen sharing is initiated by the user, and when sharing third-party apps, it will access the user's manually selected opened page; The authorization prompts and availability for specific work tasks should still depend on the version you are using. Do not mistake "Supports computer operations" as having all files and account permissions by default.
Complete 5 checks before authorization
- Narrow the scope of tasks. Specify folders, websites, and applications that are allowed, and state that sending, deleting, paying for, or publishing is prohibited.
- Prepare a clean environment. Close unrelated windows, exit finance, email backend, and password manager; If you can use test accounts, don't use high-permission accounts directly.
- Assign manual confirmation for key actions. Submitting forms, sending messages outward, overwriting original files, installing software, and changing account settings should all be stopped for human review.
- Require retention of intermediate products. Have it save a copy, and write the data source, calculation caliber, and completed steps into the result to facilitate reverting after detecting deviations.
- End the task as soon as it ends. Check downloaded files, browser tabs, shared content, and system permissions; Turn off unwanted file access, screen recording, or accessibility permissions promptly.
Don't use real business for stress testing for the first time
Start with a desensitization table and a reversible task for a trial run, for example, organize sample data into charts and save them to a specified directory. Observe whether it follows the path, stops at high-risk steps, and explains where the results come from. Once all three are stable, gradually add more materials and applications.
Personal users can also check privacy settings such as "Help model improve performance." Regardless of the switch, ID documents, customer lists, original contracts, and undisclosed business data should not be directly handed over to the Agent without organizational authorization and desensitization rules. The stronger the capability, the more it must adhere to minimum permissions and recoverable operations.
