LLM-Driven Robots Risk Enacting Discrimination, Violence, and Unlawful Actions
Not on the map. Why?
Abstract (arXiv)
Members of the Human-Robot Interaction (HRI) and Machine Learning (ML) communities have proposed Large Language Models (LLMs) as a promising resource for robotics tasks such as natural language interaction, household and workplace tasks, approximating 'common sense reasoning', and modeling humans. However, recent research has raised concerns about the potential for LLMs to produce discriminatory outcomes and unsafe behaviors in real-world robot experiments and applications. To assess whether such concerns are well placed in the context of HRI, we evaluate several highly-rated LLMs on discrimination and safety criteria. Our evaluation reveals that LLMs are currently unsafe for people across a diverse range of protected identity characteristics, including, but not limited to, race, gender, disability status, nationality, religion, and their intersections. Concretely, we show that LLMs produce directly discriminatory outcomes- e.g., 'gypsy' and 'mute' people are labeled untrustworthy, but not 'european' or 'able-bodied' people. We find various such examples of direct discrimination on HRI tasks such as facial expression, proxemics, security, rescue, and task assignment. Furthermore, we test models in settings with unconstrained natural language (open vocabulary) inputs, and find they fail to act safely, generating responses that accept dangerous, violent, or unlawful instructions-such as incident-causing misstatements, taking people's mobility aids, and sexual predation. Our results underscore the urgent need for systematic, routine, and comprehensive risk assessments and assurances to improve outcomes and ensure LLMs only operate on robots when it is safe, effective, and just to do so. We provide code to reproduce our experiments at https://github.com/rumaisa-azeem/llm-robots-discrimination-safety .
Key facts. Cited by 21 papers in the map (data through 7 Oct 2026). Builds on 69 of its 217 references that are in the map. First posted on arXiv 13 Jun 2024.
Builds on
69 of 217 references.
References · 69
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2022Do As I Can, Not As I Say: Grounding Language in Robotic Affordancescited by 2,302
- 2019HuggingFace's Transformers: State-of-the-art Natural Language Processingcited by 2,201
- 2016Man is to Computer Programmer as Woman is to Homemaker? Debiasing Word Embeddingscited by 1,304
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
- 2022Inner Monologue: Embodied Reasoning through Planning with Language Modelscited by 1,057
- 2022Red Teaming Language Models with Language Modelscited by 983
- 2020StereoSet: Measuring stereotypical bias in pretrained language modelscited by 911
- 2023Whose Opinions Do Language Models Reflect?cited by 759
- 2018Gender Bias in Coreference Resolution: Evaluation and Debiasing Methodscited by 657
- 2022ProgPrompt: Generating Situated Robot Task Plans using Large Language Modelscited by 598
- 2023Faith and Fate: Limits of Transformers on Compositionalitycited by 496
38 more
- 2021Documenting Large Webtext Corpora: A Case Study on the Colossal Clean Crawled Corpuscited by 481
- 2021DExperts: Decoding-Time Controlled Text Generation with Experts and Anti-Expertscited by 434
- 2021BOLD: Dataset and Metrics for Measuring Biases in Open-Ended Language Generationcited by 410
- 2023Toxicity in ChatGPT: Analyzing Persona-assigned Language Modelscited by 356
- 2019Bias in Bios: A Case Study of Semantic Representation Bias in a High-Stakes Settingcited by 346
- 2020Transporter Networks: Rearranging the Visual World for Robotic Manipulationcited by 342
- 2021Multimodal datasets: misogyny, pornography, and malignant stereotypescited by 326
- 2023On the Planning Abilities of Large Language Models : A Critical Investigationcited by 308
- 2023Language to Rewards for Robotic Skill Synthesiscited by 307
- 2023Robots That Ask For Help: Uncertainty Alignment for Large Language Model Plannerscited by 298
- 2023From Pretraining Data to Language Models to Downstream Tasks: Tracking the Trails of Political Biases Leading to Unfair NLP Modelscited by 257
- 2019Evaluating Gender Bias in Machine Translationcited by 247
- 2023Reasoning or Reciting? Exploring the Capabilities and Limitations of Language Models Through Counterfactual Taskscited by 243
- 2019A Framework for Understanding Sources of Harm throughout the Machine Learning Life Cyclecited by 192
- 2023Do-Not-Answer: A Dataset for Evaluating Safeguards in LLMscited by 176
- 2023REFLECT: Summarizing Robot Experiences for Failure Explanation and Correctioncited by 171
- 2023Scaling Up and Distilling Down: Language-Guided Robot Skill Acquisitioncited by 156
- 2023Task and Motion Planning with Large Language Models for Object Rearrangementcited by 140
- 2022Power to the People? Opportunities and Challenges for Participatory AIcited by 137
- 2021Sustainable Modular Debiasing of Language Modelscited by 98
- 2022The Fallacy of AI Functionalitycited by 88
- 2021Do Datasets Have Politics? Disciplinary Values in Computer Vision Dataset Developmentcited by 85
- 2020Why Fairness Cannot Be Automated: Bridging the Gap Between EU Non-Discrimination Law and AIcited by 81
- 2019Predictive Inequity in Object Detectioncited by 77
- 2024SafetyPrompts: a Systematic Review of Open Datasets for Evaluating and Improving Large Language Model Safetycited by 75
- 2019On Measuring Gender Bias in Translation of Gender-neutral Pronounscited by 59
- 2023Semantic Anomaly Detection with Large Language Modelscited by 53
- 2022Perturbation Augmentation for Fairer NLPcited by 51
- 2024Evaluating Gender Bias in Large Language Models via Chain-of-Thought Promptingcited by 49
- 2024Thinking Fair and Slow: On the Efficacy of Structured Prompts for Debiasing Language Modelscited by 44
- 2022Contrastive Language-Vision AI Models Pretrained on Web-Scraped Multimodal Data Exhibit Sexual Objectification Biascited by 43
- 2021Fairness for Unobserved Characteristics: Insights from Technological Impacts on Queer Communitiescited by 40
- 2024Using Counterfactual Tasks to Evaluate the Generality of Analogical Reasoning in Large Language Modelscited by 38
- 2024The illusion of artificial inclusioncited by 34
- 2022Exploring How Machine Learning Practitioners (Try To) Use Fairness Toolkitscited by 33
- 2022Dislocated Accountabilities in the AI Supply Chain: Modularity and Developers' Notions of Responsibilitycited by 33
- 2023Queer In AI: A Case Study in Community-Led Participatory AIcited by 33
- 2023Large Language Models as Zero-Shot Human Models for Human-Robot Interactioncited by 30
50 most cited of 69 All 69 (JSON)
Built on by
Citing papers per year: 2024: 2; 2025: 9; 2026: 10.
21 papers.
Sort:
By area:
- 2024Trustworthiness in Retrieval-Augmented Generation Systems: A Surveycited by 83
- 2025A Survey of State of the Art Large Vision Language Models: Alignment, Benchmark, Evaluations and Challengescited by 46
- 2024BadRobot: Jailbreaking Embodied LLM Agents in the Physical Worldcited by 40
- 2025The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMscited by 24
- 2025SafePlan: Leveraging Formal Logic and Chain-of-Thought Reasoning for Enhanced Safety in LLM-based Robotic Task Planningcited by 9
- 2026Using large language models for embodied planning introduces systematic safety riskscited by 4
- 2025Benchmarking LLM Privacy Recognition for Social Robot Decision Makingcited by 3
- 2025Embodied AI: Emerging Risks and Opportunities for Policy Actioncited by 3
- 2026Understanding Persuasive Interactions between Generative Social Agents and Humans: The Knowledge-based Persuasion Model (KPM)cited by 3
- 2025Humans Coexist, So Must Embodied Artificial Agentscited by 2
- 2025Encoding Inequity: Examining Demographic Bias in LLM-Driven Robot Caregivingcited by 2
- 2025RoboInspector: Unveiling the Unreliability of Policy Code for LLM-enabled Robotic Manipulationcited by 2
9 more
- 2025Enhancing Reliability in LLM-Integrated Robotic Systems: A Unified Approach to Security and Safetycited by 1
- 2026Benchmarking the Safety of Large Language Models for Robotic Health Attendant Controlcited by 1
- 2026Never say never: Exploring the effects of available knowledge on agent persuasiveness in controlled physiotherapy motivation dialoguescited by 0
- 2026Evaluating VLMs' Spatial Reasoning Over Robot Motion: A Step Towards Robot Planning with Motion Preferencescited by 0
- 2026Designing for Disagreement: Front-End Guardrails for Assistance Allocation in LLM-Enabled Robotscited by 0
- 2026Responsible Personalisation: The Double-Edged Sword of Personalisation in Human-Robot Interactioncited by 0
- 2026Teachy Mini: Development and Preliminary Evaluation of a Knowledge-Based Generative Social Robot for Higher Educationcited by 0
- 2026LLM-Driven Autonomous Vehicles Inherit Human Driver Biases in Pedestrian Yielding: Results and Implications From A New Benchmarkcited by 0
- 2026Security and Privacy in Large-Model-Driven Embodied Agents: Attacks, Defenses, and Future Directionscited by 0
- 2026LLM-Driven Autonomous Vehicles Inherit Human Driver Biases in Pedestrian Yielding: Results and Implications From A New Benchmark31 Aug 2026
- 2026Security and Privacy in Large-Model-Driven Embodied Agents: Attacks, Defenses, and Future Directions19 Aug 2026
- 2026Teachy Mini: Development and Preliminary Evaluation of a Knowledge-Based Generative Social Robot for Higher Education24 Jul 2026
- 2026Responsible Personalisation: The Double-Edged Sword of Personalisation in Human-Robot Interaction7 Jul 2026
- 2026Benchmarking the Safety of Large Language Models for Robotic Health Attendant Control29 Apr 2026
- 2026Using large language models for embodied planning introduces systematic safety risks20 Apr 2026
- 2026Designing for Disagreement: Front-End Guardrails for Assistance Allocation in LLM-Enabled Robots17 Mar 2026
- 2026Evaluating VLMs' Spatial Reasoning Over Robot Motion: A Step Towards Robot Planning with Motion Preferences13 Mar 2026
- 2026Never say never: Exploring the effects of available knowledge on agent persuasiveness in controlled physiotherapy motivation dialogues13 Feb 2026
- 2026Understanding Persuasive Interactions between Generative Social Agents and Humans: The Knowledge-based Persuasion Model (KPM)12 Feb 2026
- 2025Enhancing Reliability in LLM-Integrated Robotic Systems: A Unified Approach to Security and Safety2 Sep 2025
- 2025RoboInspector: Unveiling the Unreliability of Policy Code for LLM-enabled Robotic Manipulation29 Aug 2025
9 more
- 2025Embodied AI: Emerging Risks and Opportunities for Policy Action28 Aug 2025
- 2025Benchmarking LLM Privacy Recognition for Social Robot Decision Making22 Jul 2025
- 2025The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs6 Jun 2025
- 2025SafePlan: Leveraging Formal Logic and Chain-of-Thought Reasoning for Enhanced Safety in LLM-based Robotic Task Planning10 Mar 2025
- 2025Encoding Inequity: Examining Demographic Bias in LLM-Driven Robot Caregiving24 Feb 2025
- 2025Humans Coexist, So Must Embodied Artificial Agents7 Feb 2025
- 2025A Survey of State of the Art Large Vision Language Models: Alignment, Benchmark, Evaluations and Challenges4 Jan 2025
- 2024Trustworthiness in Retrieval-Augmented Generation Systems: A Survey16 Sep 2024
- 2024BadRobot: Jailbreaking Embodied LLM Agents in the Physical World16 Jul 2024
- 2024BadRobot: Jailbreaking Embodied LLM Agents in the Physical Worldcited by 40
- 2026Never say never: Exploring the effects of available knowledge on agent persuasiveness in controlled physiotherapy motivation dialoguescited by 0
- 2026Security and Privacy in Large-Model-Driven Embodied Agents: Attacks, Defenses, and Future Directionscited by 0
- 2026Security and Privacy in Large-Model-Driven Embodied Agents: Attacks, Defenses, and Future Directions19 Aug 2026
- 2026Never say never: Exploring the effects of available knowledge on agent persuasiveness in controlled physiotherapy motivation dialogues13 Feb 2026
- 2024BadRobot: Jailbreaking Embodied LLM Agents in the Physical World16 Jul 2024
- 2025SafePlan: Leveraging Formal Logic and Chain-of-Thought Reasoning for Enhanced Safety in LLM-based Robotic Task Planningcited by 9
- 2025RoboInspector: Unveiling the Unreliability of Policy Code for LLM-enabled Robotic Manipulationcited by 2
- 2026Evaluating VLMs' Spatial Reasoning Over Robot Motion: A Step Towards Robot Planning with Motion Preferencescited by 0
- 2026Evaluating VLMs' Spatial Reasoning Over Robot Motion: A Step Towards Robot Planning with Motion Preferences13 Mar 2026
- 2025RoboInspector: Unveiling the Unreliability of Policy Code for LLM-enabled Robotic Manipulation29 Aug 2025
- 2025SafePlan: Leveraging Formal Logic and Chain-of-Thought Reasoning for Enhanced Safety in LLM-based Robotic Task Planning10 Mar 2025
- 2025The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMscited by 24
- 2026Using large language models for embodied planning introduces systematic safety riskscited by 4
- 2025Benchmarking LLM Privacy Recognition for Social Robot Decision Makingcited by 3
- 2025Embodied AI: Emerging Risks and Opportunities for Policy Actioncited by 3
- 2026Understanding Persuasive Interactions between Generative Social Agents and Humans: The Knowledge-based Persuasion Model (KPM)cited by 3
- 2025Humans Coexist, So Must Embodied Artificial Agentscited by 2
- 2025Encoding Inequity: Examining Demographic Bias in LLM-Driven Robot Caregivingcited by 2
- 2025Enhancing Reliability in LLM-Integrated Robotic Systems: A Unified Approach to Security and Safetycited by 1
- 2026Benchmarking the Safety of Large Language Models for Robotic Health Attendant Controlcited by 1
- 2026Designing for Disagreement: Front-End Guardrails for Assistance Allocation in LLM-Enabled Robotscited by 0
- 2026Responsible Personalisation: The Double-Edged Sword of Personalisation in Human-Robot Interactioncited by 0
- 2026Teachy Mini: Development and Preliminary Evaluation of a Knowledge-Based Generative Social Robot for Higher Educationcited by 0
- 2026Teachy Mini: Development and Preliminary Evaluation of a Knowledge-Based Generative Social Robot for Higher Education24 Jul 2026
- 2026Responsible Personalisation: The Double-Edged Sword of Personalisation in Human-Robot Interaction7 Jul 2026
- 2026Benchmarking the Safety of Large Language Models for Robotic Health Attendant Control29 Apr 2026
- 2026Using large language models for embodied planning introduces systematic safety risks20 Apr 2026
- 2026Designing for Disagreement: Front-End Guardrails for Assistance Allocation in LLM-Enabled Robots17 Mar 2026
- 2026Understanding Persuasive Interactions between Generative Social Agents and Humans: The Knowledge-based Persuasion Model (KPM)12 Feb 2026
- 2025Enhancing Reliability in LLM-Integrated Robotic Systems: A Unified Approach to Security and Safety2 Sep 2025
- 2025Embodied AI: Emerging Risks and Opportunities for Policy Action28 Aug 2025
- 2025Benchmarking LLM Privacy Recognition for Social Robot Decision Making22 Jul 2025
- 2025The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs6 Jun 2025
- 2025Encoding Inequity: Examining Demographic Bias in LLM-Driven Robot Caregiving24 Feb 2025
- 2025Humans Coexist, So Must Embodied Artificial Agents7 Feb 2025