EARBench: Towards Evaluating Physical Risk Awareness for Task Planning of Foundation Model-based Embodied AI Agents
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
Embodied artificial intelligence (EAI) integrates advanced AI models into physical entities for real-world interaction. The emergence of foundation models as the "brain" of EAI agents for high-level task planning has shown promising results. However, the deployment of these agents in physical environments presents significant safety challenges. For instance, a housekeeping robot lacking sufficient risk awareness might place a metal container in a microwave, potentially causing a fire. To address these critical safety concerns, comprehensive pre-deployment risk assessments are imperative. This study introduces EARBench, a novel framework for automated physical risk assessment in EAI scenarios. EAIRiskBench employs a multi-agent cooperative system that leverages various foundation models to generate safety guidelines, create risk-prone scenarios, make task planning, and evaluate safety systematically. Utilizing this framework, we construct EARDataset, comprising diverse test cases across various domains, encompassing both textual and visual scenarios. Our comprehensive evaluation of state-of-the-art foundation models reveals alarming results: all models exhibit high task risk rates (TRR), with an average of 95.75% across all evaluated models. To address these challenges, we further propose two prompting-based risk mitigation strategies. While these strategies demonstrate some efficacy in reducing TRR, the improvements are limited, still indicating substantial safety concerns. This study provides the first large-scale assessment of physical risk awareness in EAI agents. Our findings underscore the critical need for enhanced safety measures in EAI systems and provide valuable insights for future research directions in developing safer embodied artificial intelligence system. Data and code are available at https://github.com/zihao-ai/EARBench.
Key facts. Cited by 24 papers in the map (data through 7 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 8 of its 35 references that are in the map. First posted on arXiv 8 Aug 2024.
Builds on
8 of 35 references.
References · 8
- 2023GPT-4 Technical Reportcited by 18,132
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2024Gemini 1.5: Unlocking multimodal understanding across millions of tokens of contextcited by 3,175
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 2,950
- 2024Qwen2 Technical Reportcited by 2,076
- 2024Mixtral of Expertscited by 1,785
- 2023Open-Ended Instructable Embodied Agents with Memory-Augmented Large Language Modelscited by 37
- 2024Leveraging Large Language Models for enhanced personalised user experience in Smart Homescited by 4
Built on by
Citing papers per year: 2024: 1; 2025: 10; 2026: 13.
24 papers.
Sort:
By area:
- 2024SafeAgentBench: A Benchmark for Safe Task Planning of Embodied LLM Agentscited by 102
- 2025IS-Bench: Evaluating Interactive Safety of VLM-Driven Embodied Agents in Daily Household Taskscited by 40
- 2025AGENTSAFE: Benchmarking the Safety of Embodied Agents on Hazardous Instructionscited by 33
- 2025Subtle Risks, Critical Failures: A Framework for Diagnosing Physical Safety of LLMs for Embodied Decision Makingcited by 19
- 2025Alignment and Safety in Large Language Models: Safety Mechanisms, Training Paradigms, and Emerging Challengescited by 14
- 2025SafeMind: Benchmarking and Mitigating Safety Risks in Embodied LLM Agentscited by 13
- 2025Safety of Embodied Navigation: A Surveycited by 9
- 2026Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluationcited by 5
- 2026ForesightSafety Bench: A Frontier Risk Evaluation and Governance Framework towards Safe AIcited by 3
- 2026HomeGuard: VLM-based Embodied Safeguard for Identifying Contextual Risk in Household Taskcited by 3
- 2025RoboInspector: Unveiling the Unreliability of Policy Code for LLM-enabled Robotic Manipulationcited by 2
- 2025SENTINEL: A Multi-Level Formal Framework for Safety Evaluation of Foundation Model-based Embodied Agentscited by 2
12 more
- 2026Benchmarking the Safety of Large Language Models for Robotic Health Attendant Controlcited by 1
- 2026RoboJailBench: Benchmarking Adversarial Attacks and Defenses in Embodied Robotic Agentscited by 1
- 2025Towards provable probabilistic safety for scalable embodied AI systemscited by 0
- 2025Context-Aware Risk Estimation in Home Environments: A Probabilistic Framework for Service Robotscited by 0
- 2026ICAT: Incident-Case-Grounded Adaptive Testing for Physical-Risk Prediction in Embodied World Modelscited by 0
- 2026When Words Are Safe But Actions Kill: Probing Physical Jailbreak Beyond Textual Jailbreak in Hidden-State Risk Spacecited by 0
- 2026Self-Evolving Just-In-Time Memory for Proactive Embodied Safetycited by 0
- 2026GuardianBench: A Same-Scene Instruction-Contrastive Benchmark for Latent Contextual Risk in Embodied AIcited by 0
- 2026Resilience Matters for Embodied Agents System: New Metrics, Systematic Evaluation, and Optimizationcited by 0
- 2026CLAMP: Constrained Decoding for Vision-Language Embodied Planningcited by 0
- 2026Security and Privacy in Large-Model-Driven Embodied Agents: Attacks, Defenses, and Future Directionscited by 0
- 2026PlanGuard: A Guardrail for Multi-Step Plan Safety in Embodied Agentscited by 0
- 2026PlanGuard: A Guardrail for Multi-Step Plan Safety in Embodied Agents26 Sep 2026
- 2026CLAMP: Constrained Decoding for Vision-Language Embodied Planning8 Sep 2026
- 2026Resilience Matters for Embodied Agents System: New Metrics, Systematic Evaluation, and Optimization24 Aug 2026
- 2026GuardianBench: A Same-Scene Instruction-Contrastive Benchmark for Latent Contextual Risk in Embodied AI22 Aug 2026
- 2026Security and Privacy in Large-Model-Driven Embodied Agents: Attacks, Defenses, and Future Directions19 Aug 2026
- 2026When Words Are Safe But Actions Kill: Probing Physical Jailbreak Beyond Textual Jailbreak in Hidden-State Risk Space16 Jul 2026
- 2026Self-Evolving Just-In-Time Memory for Proactive Embodied Safety26 Jun 2026
- 2026Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation9 Jun 2026
- 2026RoboJailBench: Benchmarking Adversarial Attacks and Defenses in Embodied Robotic Agents19 May 2026
- 2026Benchmarking the Safety of Large Language Models for Robotic Health Attendant Control29 Apr 2026
- 2026ICAT: Incident-Case-Grounded Adaptive Testing for Physical-Risk Prediction in Embodied World Models31 Mar 2026
- 2026HomeGuard: VLM-based Embodied Safeguard for Identifying Contextual Risk in Household Task15 Mar 2026
12 more
- 2026ForesightSafety Bench: A Frontier Risk Evaluation and Governance Framework towards Safe AI15 Feb 2026
- 2025SENTINEL: A Multi-Level Formal Framework for Safety Evaluation of Foundation Model-based Embodied Agents14 Oct 2025
- 2025SafeMind: Benchmarking and Mitigating Safety Risks in Embodied LLM Agents30 Sep 2025
- 2025RoboInspector: Unveiling the Unreliability of Policy Code for LLM-enabled Robotic Manipulation29 Aug 2025
- 2025Context-Aware Risk Estimation in Home Environments: A Probabilistic Framework for Service Robots27 Aug 2025
- 2025Safety of Embodied Navigation: A Survey7 Aug 2025
- 2025Alignment and Safety in Large Language Models: Safety Mechanisms, Training Paradigms, and Emerging Challenges25 Jul 2025
- 2025IS-Bench: Evaluating Interactive Safety of VLM-Driven Embodied Agents in Daily Household Tasks19 Jun 2025
- 2025AGENTSAFE: Benchmarking the Safety of Embodied Agents on Hazardous Instructions17 Jun 2025
- 2025Towards provable probabilistic safety for scalable embodied AI systems5 Jun 2025
- 2025Subtle Risks, Critical Failures: A Framework for Diagnosing Physical Safety of LLMs for Embodied Decision Making26 May 2025
- 2024SafeAgentBench: A Benchmark for Safe Task Planning of Embodied LLM Agents17 Dec 2024
- 2024SafeAgentBench: A Benchmark for Safe Task Planning of Embodied LLM Agentscited by 102
- 2025IS-Bench: Evaluating Interactive Safety of VLM-Driven Embodied Agents in Daily Household Taskscited by 40
- 2025SafeMind: Benchmarking and Mitigating Safety Risks in Embodied LLM Agentscited by 13
- 2026Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluationcited by 5
- 2025SENTINEL: A Multi-Level Formal Framework for Safety Evaluation of Foundation Model-based Embodied Agentscited by 2
- 2026Security and Privacy in Large-Model-Driven Embodied Agents: Attacks, Defenses, and Future Directionscited by 0
- 2026Security and Privacy in Large-Model-Driven Embodied Agents: Attacks, Defenses, and Future Directions19 Aug 2026
- 2026Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation9 Jun 2026
- 2025SENTINEL: A Multi-Level Formal Framework for Safety Evaluation of Foundation Model-based Embodied Agents14 Oct 2025
- 2025SafeMind: Benchmarking and Mitigating Safety Risks in Embodied LLM Agents30 Sep 2025
- 2025IS-Bench: Evaluating Interactive Safety of VLM-Driven Embodied Agents in Daily Household Tasks19 Jun 2025
- 2024SafeAgentBench: A Benchmark for Safe Task Planning of Embodied LLM Agents17 Dec 2024
- 2025AGENTSAFE: Benchmarking the Safety of Embodied Agents on Hazardous Instructionscited by 33
- 2026HomeGuard: VLM-based Embodied Safeguard for Identifying Contextual Risk in Household Taskcited by 3
- 2026RoboJailBench: Benchmarking Adversarial Attacks and Defenses in Embodied Robotic Agentscited by 1
- 2026Self-Evolving Just-In-Time Memory for Proactive Embodied Safetycited by 0
- 2026CLAMP: Constrained Decoding for Vision-Language Embodied Planningcited by 0
- 2026CLAMP: Constrained Decoding for Vision-Language Embodied Planning8 Sep 2026
- 2026Self-Evolving Just-In-Time Memory for Proactive Embodied Safety26 Jun 2026
- 2026RoboJailBench: Benchmarking Adversarial Attacks and Defenses in Embodied Robotic Agents19 May 2026
- 2026HomeGuard: VLM-based Embodied Safeguard for Identifying Contextual Risk in Household Task15 Mar 2026
- 2025AGENTSAFE: Benchmarking the Safety of Embodied Agents on Hazardous Instructions17 Jun 2025
- 2025Subtle Risks, Critical Failures: A Framework for Diagnosing Physical Safety of LLMs for Embodied Decision Makingcited by 19
- 2025Safety of Embodied Navigation: A Surveycited by 9
- 2026ForesightSafety Bench: A Frontier Risk Evaluation and Governance Framework towards Safe AIcited by 3
- 2026Benchmarking the Safety of Large Language Models for Robotic Health Attendant Controlcited by 1
- 2025Towards provable probabilistic safety for scalable embodied AI systemscited by 0
- 2025Context-Aware Risk Estimation in Home Environments: A Probabilistic Framework for Service Robotscited by 0
- 2026GuardianBench: A Same-Scene Instruction-Contrastive Benchmark for Latent Contextual Risk in Embodied AIcited by 0
- 2026Resilience Matters for Embodied Agents System: New Metrics, Systematic Evaluation, and Optimizationcited by 0
- 2026Resilience Matters for Embodied Agents System: New Metrics, Systematic Evaluation, and Optimization24 Aug 2026
- 2026GuardianBench: A Same-Scene Instruction-Contrastive Benchmark for Latent Contextual Risk in Embodied AI22 Aug 2026
- 2026Benchmarking the Safety of Large Language Models for Robotic Health Attendant Control29 Apr 2026
- 2026ForesightSafety Bench: A Frontier Risk Evaluation and Governance Framework towards Safe AI15 Feb 2026
- 2025Context-Aware Risk Estimation in Home Environments: A Probabilistic Framework for Service Robots27 Aug 2025
- 2025Safety of Embodied Navigation: A Survey7 Aug 2025
- 2025Towards provable probabilistic safety for scalable embodied AI systems5 Jun 2025
- 2025Subtle Risks, Critical Failures: A Framework for Diagnosing Physical Safety of LLMs for Embodied Decision Making26 May 2025
Similar, not cited
Close in wording, no citation either way
- 2026Safety in Embodied AI: A Survey of Risks, Attacks, and Defenses
- 2026EMBGuard: Constructing Hazard-Aware Guardrails for Safe Planning in Embodied Agents
- 2025MADRA: Multi-Agent Debate for Risk-Aware Embodied Planning
- 2026ARGOS: Automated Functional Safety Requirement Synthesis for Embodied AI via Attribute-Guided Combinatorial Reasoning
- 2025Can AI Perceive Physical Danger and Intervene?
- 2026RT-Safe: Benchmarking Agent Safety in Real-Time Embodied Environment
- 2026BeSafe-Bench: Unveiling Behavioral Safety Risks of Situated Agents in Functional Environments
- 2024SafeEmbodAI: a Safety Framework for Mobile Robots in Embodied AI Systems