mlsanityData to 7 Oct 2026

SafeEmbodAI: a Safety Framework for Mobile Robots in Embodied AI Systems

arXiv 2409.01630 ↗First posted 3 Sep 2024cs.RO cs.AI cs.ETcited by 12

Not on the map. Why?

Abstract (arXiv)

Embodied AI systems, including AI-powered robots that autonomously interact with the physical world, stand to be significantly advanced by Large Language Models (LLMs), which enable robots to better understand complex language commands and perform advanced tasks with enhanced comprehension and adaptability, highlighting their potential to improve embodied AI capabilities. However, this advancement also introduces safety challenges, particularly in robotic navigation tasks. Improper safety management can lead to failures in complex environments and make the system vulnerable to malicious command injections, resulting in unsafe behaviours such as detours or collisions. To address these issues, we propose textitSafeEmbodAI, a safety framework for integrating mobile robots into embodied AI systems. textitSafeEmbodAI incorporates secure prompting, state management, and safety validation mechanisms to secure and assist LLMs in reasoning through multi-modal data and validating responses. We designed a metric to evaluate mission-oriented exploration, and evaluations in simulated environments demonstrate that our framework effectively mitigates threats from malicious commands and improves performance in various environment settings, ensuring the safety of embodied AI systems. Notably, In complex environments with mixed obstacles, our method demonstrates a significant performance increase of 267% compared to the baseline in attack scenarios, highlighting its robustness in challenging conditions.

Key facts. Cited by 12 papers in the map (data through 7 Oct 2026). Builds on 24 of its 42 references that are in the map. First posted on arXiv 3 Sep 2024.

Builds on

24 of 42 references.

References · 24

  1. 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
  2. 2022Large Language Models are Zero-Shot Reasonerscited by 4,323
  3. 2023The Rise and Potential of Large Language Model Based Agents: A Surveycited by 1,422
  4. 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,339
  5. 2022Ignore Previous Prompt: Attack Techniques For Language Modelscited by 760
  6. 2024Parameter-Efficient Fine-Tuning for Large Models: A Comprehensive Surveycited by 641
  7. 2024A Survey on RAG Meeting LLMs: Towards Retrieval-Augmented Large Language Modelscited by 450
  8. 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Uglycited by 380
  9. 20243D-VLA: A 3D Vision-Language-Action Generative World Modelcited by 320
  10. 2021A Survey of Embodied AI: From Simulators to Research Taskscited by 256
  11. 2024Automatic and Universal Prompt Injection Attacks against Large Language Modelscited by 112
  12. 2023Toward General-Purpose Robots via Foundation Models: A Survey and Meta-Analysiscited by 99
12 more
  1. 2024A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systemscited by 74
  2. 2023From Prompt Injections to SQL Injection Attacks: How Protected is Your LLM-Integrated Web Application?cited by 53
  3. 2024Defensive Prompt Patch: A Robust and Interpretable Defense of LLMs against Jailbreak Attackscited by 35
  4. 2024From LLMs to Actions: Latent Codes as Bridges in Hierarchical Robot Controlcited by 34
  5. 2024Human-Imperceptible Retrieval Poisoning Attacks in LLM-Powered Applicationscited by 32
  6. 2024Putting GPT-4o to the Sword: A Comprehensive Evaluation of Language, Vision, Speech, and Multimodal Proficiencycited by 31
  7. 2024Can We Trust Embodied Agents? Exploring Backdoor Attacks against Embodied LLM-based Decision-Making Systemscited by 23
  8. 2024Data Poisoning for In-context Learningcited by 21
  9. 2023Maatphor: Automated Variant Analysis for Prompt Injection Attackscited by 12
  10. 2022SoK: Rethinking Sensor Spoofing Attacks against Robotic Vehicles from a Systematic Viewcited by 9
  11. 2021Robust Multi-Robot Active Target Tracking Against Sensing and Communication Attackscited by 4
  12. 2024Unifying Large Language Model and Deep Reinforcement Learning for Human-in-Loop Interactive Socially-aware Navigationcited by 4

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 1; 2025: 5; 2026: 6.

12 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026Safety in Embodied AI: A Survey of Risks, Attacks, and Defenses
  2. 2025A Framework for Benchmarking and Aligning Task-Planning Safety in LLM-Based Embodied Agents
  3. 2024SafeAgentBench: A Benchmark for Safe Task Planning of Embodied LLM Agents
  4. 2025Trust in LLM-controlled Robotics: a Survey of Security Threats, Defenses and Challenges
  5. 2025SafeMind: Benchmarking and Mitigating Safety Risks in Embodied LLM Agents
  6. 2026Silent Failures in Physical AI: A Literature Review of Runtime Action Authorization for Autonomous Systems
  7. 2025AGENTSAFE: Benchmarking the Safety of Embodied Agents on Hazardous Instructions
  8. 2024BadRobot: Jailbreaking Embodied LLM Agents in the Physical World