AgentMonitor: A Plug-and-Play Framework for Predictive and Secure Multi-Agent Systems
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
The rapid advancement of large language models (LLMs) has led to the rise of LLM-based agents. Recent research shows that multi-agent systems (MAS), where each agent plays a specific role, can outperform individual LLMs. However, configuring an MAS for a task remains challenging, with performance only observable post-execution. Inspired by scaling laws in LLM development, we investigate whether MAS performance can be predicted beforehand. We introduce AgentMonitor, a framework that integrates at the agent level to capture inputs and outputs, transforming them into statistics for training a regression model to predict task performance. Additionally, it can further apply real-time corrections to address security risks posed by malicious agents, mitigating negative impacts and enhancing MAS security. Experiments demonstrate that an XGBoost model achieves a Spearman correlation of 0.89 in-domain and 0.58 in more challenging scenarios. Furthermore, using AgentMonitor reduces harmful content by 6.2% and increases helpful content by 1.8% on average, enhancing safety and reliability. Code is available at urlhttps://github.com/chanchimin/AgentMonitor.
Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 46 of its 59 references that are in the map. First posted on arXiv 27 Aug 2024.
Builds on
46 of 59 references.
Closest ancestors · 2
Same direction, newest first
- 2024Flooding Spread of Manipulated Knowledge in LLM-Based Multi-Agent Communities10 Jul
- 2024PsySafe: A Comprehensive Framework for Psychological-based Attack, Defense, and Evaluation of Multi-agent System Safety22 Jan
Other references · 44
- 2023GPT-4 Technical Reportcited by 18,132
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
- 2021Training Verifiers to Solve Math Word Problemscited by 9,743
- 2021Evaluating Large Language Models Trained on Codecited by 8,053
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2020Scaling Laws for Neural Language Modelscited by 6,411
- 2016XGBoost: A Scalable Tree Boosting Systemcited by 5,120
- 2019Parameter-Efficient Transfer Learning for NLPcited by 4,195
- 2023Toolformer: Language Models Can Teach Themselves to Use Toolscited by 4,072
- 2021The Power of Scale for Parameter-Efficient Prompt Tuningcited by 3,769
32 more
- 2023Generative Agents: Interactive Simulacra of Human Behaviorcited by 3,500
- 2023Self-Refine: Iterative Refinement with Self-Feedbackcited by 3,317
- 2023Tree of Thoughts: Deliberate Problem Solving with Large Language Modelscited by 3,155
- 2022Training Compute-Optimal Large Language Modelscited by 2,927
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
- 2023ToolLLM: Facilitating Large Language Models to Master 16000+ Real-world APIscited by 1,880
- 2023MetaGPT: Meta Programming for A Multi-Agent Collaborative Frameworkcited by 1,761
- 2021WebGPT: Browser-assisted question-answering with human feedbackcited by 1,722
- 2023CAMEL: Communicative Agents for "Mind" Exploration of Large Language Model Societycited by 1,348
- 2023AWQ: Activation-aware Weight Quantization for LLM Compression and Accelerationcited by 1,234
- 2021Scaling Language Models: Methods, Analysis & Insights from Training Gophercited by 1,199
- 2024OpenHands: An Open Platform for AI Software Developers as Generalist Agentscited by 956
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 828
- 2023The Flan Collection: Designing Data and Methods for Effective Instruction Tuningcited by 734
- 2023ChatEval: Towards Better LLM-based Evaluators through Multi-Agent Debatecited by 724
- 2024MiniCPM: Unveiling the Potential of Small Language Models with Scalable Training Strategiescited by 694
- 2023AgentVerse: Facilitating Multi-Agent Collaboration and Exploring Emergent Behaviorscited by 580
- 2020Scaling Laws for Autoregressive Generative Modelingcited by 510
- 2023Catastrophic Jailbreak of Open-source LLMs via Exploiting Generationcited by 439
- 2024WebVoyager: Building an End-to-End Web Agent with Large Multimodal Modelscited by 424
- 2023MINT: Evaluating LLMs in Multi-turn Interaction with Tools and Language Feedbackcited by 293
- 2024Scaling Large Language Model-based Multi-Agent Collaborationcited by 235
- 2024MM1: Methods, Analysis & Insights from Multimodal LLM Pre-trainingcited by 230
- 2024OS-Copilot: Towards Generalist Computer Agents with Self-Improvementcited by 203
- 2024Data Mixing Laws: Optimizing Data Mixtures by Predicting Language Modeling Performancecited by 179
- 2024RQ-RAG: Learning to Refine Queries for Retrieval Augmented Generationcited by 144
- 2024Internet of Agents: Weaving a Web of Heterogeneous Agents for Collaborative Intelligencecited by 80
- 2023Advancing Transformer Architecture in Long-Context Large Language Models: A Comprehensive Surveycited by 71
- 2024Scaling Laws for Downstream Task Performance of Large Language Modelscited by 49
- 2023How Predictable Are Large Language Model Capabilities? A Case Study on BIG-benchcited by 34
- 2024BiMix: A Bivariate Data Mixing Law for Language Model Pretrainingcited by 23
- 2023OpenDelta: A Plug-and-play Library for Parameter-efficient Adaptation of Pre-trained Modelscited by 6
Built on by
Citing papers per year: 2024: 2; 2025: 3; 2026: 4.
9 papers.
- 2024Large Language Model-Brained GUI Agents: A Surveycited by 160
- 2025VeriGuard: Enhancing LLM Agent Safety via Verified Code Generationcited by 46
- 2024Large Model Based Agents: State-of-the-Art, Cooperation Paradigms, Security and Privacy, and Future Trendscited by 26
- 2025TAMAS: Benchmarking Adversarial Risks in Multi-Agent LLM Systemscited by 24
- 2026Automata from Agent Traces: Failure and Next-Step Predictioncited by 2
- 2025Enabling Regulatory Multi-Agent Collaboration: Architecture, Challenges, and Solutionscited by 1
- 2026SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systemscited by 1
- 2026Towards Feedback-to-Plan Decisions for Self-Evolving LLM Agents in CUDA Kernel Generationcited by 0
- 2026Semantic Cooperative Games for Contribution Attribution in LLM-Based Multi-Agent Systemscited by 0
- 2026SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systems1 Sep 2026
- 2026Automata from Agent Traces: Failure and Next-Step Prediction24 Aug 2026
- 2026Towards Feedback-to-Plan Decisions for Self-Evolving LLM Agents in CUDA Kernel Generation26 May 2026
- 2026Semantic Cooperative Games for Contribution Attribution in LLM-Based Multi-Agent Systems14 May 2026
- 2025TAMAS: Benchmarking Adversarial Risks in Multi-Agent LLM Systems7 Nov 2025
- 2025VeriGuard: Enhancing LLM Agent Safety via Verified Code Generation3 Oct 2025
- 2025Enabling Regulatory Multi-Agent Collaboration: Architecture, Challenges, and Solutions11 Sep 2025
- 2024Large Language Model-Brained GUI Agents: A Survey27 Nov 2024
- 2024Large Model Based Agents: State-of-the-Art, Cooperation Paradigms, Security and Privacy, and Future Trends22 Sep 2024
Similar, not cited
Close in wording, no citation either way
- 2026ClawSentry: A Progressive Multi-Tier Security Monitor for Safeguarding Autonomous LLM Agents
- 2025Exposing Weak Links in Multi-Agent Systems under Adversarial Prompting
- 2025AgentSentinel: An End-to-End and Real-Time Security Defense Framework for Computer-Use Agents
- 2026REDAgentBench: Executable Red Teaming and Faithful Measurement of LLM Agent Systems
- 2026Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation
- 2025AgentSafe: Safeguarding Large Language Model-based Multi-agent Systems via Hierarchical Data Management
- 2025Demonstrations of Integrity Attacks in Multi-Agent Systems
- 2026BackdoorAgent: A Unified Framework for Backdoor Attacks on LLM-based Agents