Google’s Gemini Spark AI agent plans birthday, labels boyfriend as

The new Gemini Spark AI agent, rolled out as a beta for Google’s AI Ultra plan, can connect to a user’s Gmail, Docs and Calendar to automate tasks such as event planning [1]. In a hands‑on test, the author gave the agent full access to their personal data, asked it to plan a birthday party, and received a detailed five‑page itinerary that surprisingly listed the author’s boyfriend only as a “close friend and frequent companion” [1].

Key takeaways

• Gemini Spark accesses Gmail, Docs and Calendar to generate personalized plans [2]
• The agent created a five‑page birthday itinerary, including guest list, venue details and email drafts [1]
• It labeled the tester’s long‑term boyfriend as a “close friend,” omitting the tester from the guest list [1]
• Users must subscribe to the $100‑per‑month AI Ultra plan to use Spark, which operates via a new tab in the Gemini chatbot [1]
• Google warns of prompt‑injection risks that could expose private data if the agent is misled [1]

Automated party planning with full‑access data

During Google’s I/O developer conference, the company introduced Gemini Spark as an “always‑on” agent that links to a user’s private information and performs online duties [1]. The tester granted the agent access to their Gmail, Google Docs and Calendar, then issued a simple one‑sentence request to plan a birthday celebration. Spark scoured the inbox and calendar, uncovered an existing karaoke‑bar reservation, and produced a comprehensive itinerary that included a guest list of 15 people, venue rules, nearby restaurant suggestions, after‑party bar options, and draft email invitations [1]. The agent also populated the plan with specific details such as the reservation’s address, date and even the last four digits of the credit‑card used for the deposit [1].

When the agent generated the guest list, it identified the tester’s boyfriend as a “close friend and frequent companion” based on shared travel history and email interactions, placing him at the top of the list [1]. The tester noted the irony of the AI relegating a long‑term, live‑in partner to a friend status and observed that the tester themselves was absent from the guest list [1].

Limitations, glitches, and security warnings

Although Spark could draft emails and propose restaurant reservations, it stumbled when asked to actually book a dinner spot. The agent attempted to operate a remote browser, triggered a six‑digit verification code, and ultimately failed to complete the reservation, forcing the tester to call the restaurant manually [1]. The post‑party suggestions leaned heavily toward gay bars, which the tester found puzzling; Spark explained that it had simply matched exact keywords and past itinerary entries from the user’s Google Workspace history, without making inferences about personal identity [1].

Google’s documentation highlights the risk of prompt‑injection attacks, where malicious instructions could cause the agent to leak private information or perform unwanted actions on connected apps [1]. The company advises caution for anyone considering granting Spark access to their entire inbox, noting the potential for sensitive data to be exposed [1].