Skip to content
Agents for Humanity
Public draft. All results are preliminary desk assessments against criteria v1.0, updated 27 Sept 2026. No agent has been certified yet. How we assess
Autonomous agenthostedProprietary

Gemini Spark

Google · gemini.google/overview/agent/spark

Gemini Spark is a 24/7 background agent that runs tasks, reusable skills and schedules on Google-hosted remote browsers and computers, with an optional local Chrome mode. Skills are markdown (SKILL.md) plus scripts that owners can edit, download and upload, sensitive actions require confirmation, and custom MCP servers can be added in the US. The runtime, harness and model are proprietary Google services; Spark requires a paid plan and Keep Activity on, which enables training on activity, and there is no complete agent export or tamper-evident audit trail.

Strengths
  • Skills stored as editable SKILL.md markdown with scripts, downloadable as .zip
  • Confirmation before sending, modifying data, purchases and form submission
  • Stop button, and deleting a task removes its schedules and activity
  • Custom MCP servers can be connected (US)
  • Remote browser and computer data can be deleted from Spark settings
Gaps
  • Runs only on Google VMs with Gemini models and a closed harness
  • No complete export of tasks, schedules, remote computer state or credentials
  • Requires Keep Activity on, which enables training and human review
  • Paid Pro/Ultra plan required for all use
  • System instructions not published
  • No tamper-evident audit trail
Evidence

All 34 findings

Gemini Spark beta inside the consumer Gemini app (web, mobile, Mac) for personal Google Accounts on Google AI Pro/Ultra, launched May 2026 on Gemini 3.5 with the Antigravity harness, per public documentation as of 2026-09-27. Business/Workspace availability not assessed; the general Gemini app is covered separately.

Portable · Can you leave, and take the whole agent with you?

8%

Transparent · Can you see everything the agent is, with ordinary tools?

33%

Auditable · Can you reconstruct exactly what the agent did?

10%
  • A1
    No unrecorded actions

    Google does not document whether every consequential Spark action is durably recorded, or whether an action is blocked when it cannot be recorded.

    Unverified
  • A2
    Tamper evidence

    Task threads and their activity can be deleted without a detectable trace, and no tamper-evident record is documented.

    Fail
  • A3
    Separation from the audited

    Google does not document whether the agent, which can save files and run code on its remote computer, can alter or delete records of its own actions.

    Unverified
  • A4
    Readable with ordinary tools

    Takeout exports Gemini Apps activity in readable archives, but it is an activity export, and Spark task steps are not documented as included.

    Partial
  • A5
    Corroborated interactions

    No exchanges with other agents whose records each side could match against the other's are documented for Spark.

    Unverified

Verifiable · Can you prove the agent runs what it claims?

0%
  • V1
    Open, reproducible runtime

    The Spark runtime and Antigravity harness as hosted by Google are proprietary; no OSI-licensed, reproducible runtime is published.

    Fail
  • V2
    Active config is inspectable config

    System instructions and injected personal context are not published, so the active configuration cannot be compared with what the owner can inspect.

    Fail
  • V3
    Attributable messages

    Spark sends through the owner's Google and connected accounts, so recipients cannot verify that messages came from this agent under the owner's authority.

    Fail
  • V4
    Independently checkable record

    No action record is offered whose integrity can be checked with open tools that do not depend on Google.

    Fail
  • V5
    Comparable state

    Remote computer, task and server-side state are not fully exposed, so the owner cannot verify whether the agent's state changed between two points in time.

    Fail

Modifiable · Can you change anything, without asking?

33%

Controllable · Is your word final?

42%
Something wrong or out of date?

Vendors and the public can dispute any finding with evidence. Disputes and their resolutions are published.

Dispute a finding