Computer use is the capability for an agent to operate a computer the way a person does: it reads the screen, moves the mouse, and types, instead of calling an API. A browser agent is the common special case, driving a web browser to navigate and fill forms. The appeal is generality, since most software lacks a clean API but almost all of it has a GUI, so a GUI-driving agent can in principle use anything with no per-app integration.
That reach is also the risk. An agent with mouse, keyboard, and screen access has the broadest blast radius in agentics: it can act in any open app, see secrets it types, and take irreversible actions one click at a time, on a brittle substrate where a moved button becomes a misclick. On-screen content is untrusted input, so it is squarely inside the prompt-injection surface. Anthropic and OpenAI both shipped computer-using agents, which is what moved this from research demo to something operators have to threat-model (run it isolated, scope it, and gate the irreversible actions).