SafePlan: Leveraging Formal Logic and Chain-of-Thought Reasoning for Enhanced Safety in LLM-based Robotic Task Planning
On the map: LLM reasoning → Spatial and embodied reasoning
Abstract (arXiv)
Robotics researchers increasingly leverage large language models (LLM) in robotics systems, using them as interfaces to receive task commands, generate task plans, form team coalitions, and allocate tasks among multi-robot and human agents. However, despite their benefits, the growing adoption of LLM in robotics has raised several safety concerns, particularly regarding executing malicious or unsafe natural language prompts. In addition, ensuring that task plans, team formation, and task allocation outputs from LLMs are adequately examined, refined, or rejected is crucial for maintaining system integrity. In this paper, we introduce SafePlan, a multi-component framework that combines formal logic and chain-of-thought reasoners for enhancing the safety of LLM-based robotics systems. Using the components of SafePlan, including Prompt Sanity COT Reasoner and Invariant, Precondition, and Postcondition COT reasoners, we examined the safety of natural language task prompts, task plans, and task allocation outputs generated by LLM-based robotic systems as means of investigating and enhancing system safety profile. Our results show that SafePlan outperforms baseline models by leading to 90.5% reduction in harmful task prompt acceptance while still maintaining reasonable acceptance of safe tasks.
Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). Placed in Spatial and embodied reasoning, one of 17 directions in LLM reasoning. Builds on 6 of its 21 references that are in the map. First posted on arXiv 10 Mar 2025.
Builds on
6 of 21 references.
References · 6
- 2017AI2-THOR: An Interactive 3D Environment for Visual AIcited by 850
- 2024LLM-Driven Robots Risk Enacting Discrimination, Violence, and Unlawful Actionscited by 21
- 2024SELP: Generating Safe and Efficient Task Plans for Robot Agents with Large Language Modelscited by 21
- 2023Robot Patrol: Using Crowdsourcing and Robotic Systems to Provide Indoor Navigation Guidance to The Visually Impairedcited by 1
- 2024Modeling and Evaluating Trust Dynamics in Multi-Human Multi-Robot Task Allocationcited by 1
- 2024How Can LLMs and Knowledge Graphs Contribute to Robot Safety? A Few-Shot Learning Approachcited by 1
Built on by
Citing papers per year: 2025: 2; 2026: 7.
9 papers.
- 2025VeriSafe Agent: Safeguarding Mobile GUI Agent via Logic-based Action Verificationcited by 20
- 2025From Code Foundation Models to Agents and Applications: A Comprehensive Survey and Practical Guide to Code Intelligencecited by 13
- 2026A Hierarchical Error-Corrective Graph Framework for Autonomous Agents with LLM-Based Action Generationcited by 0
- 2026When Words Are Safe But Actions Kill: Probing Physical Jailbreak Beyond Textual Jailbreak in Hidden-State Risk Spacecited by 0
- 2026GraphThink: Graph-Enhanced LLM Thinking for Long-Horizon Embodied Task Planningcited by 0
- 2026Security of Foundation-Model-Powered Embodied Agents: Attack Surfaces, Attacks, Defenses, and Evaluationcited by 0
- 2026MaCoPlanner: LLM-Assisted Manual-Compiled Task Planning with Proactive Safety Verification for Robotic Industrial Panel Operationcited by 0
- 2026Safe Task Planning with Long-Term Graph Memory for Embodied Agentscited by 0
- 2026SafeInferCom: Safe Inference-Time Compute via Verifier-Guided Mid-Generation Intervention for Robotic Task Planningcited by 0
- 2026SafeInferCom: Safe Inference-Time Compute via Verifier-Guided Mid-Generation Intervention for Robotic Task Planning8 Oct 2026
- 2026Safe Task Planning with Long-Term Graph Memory for Embodied Agents8 Sep 2026
- 2026MaCoPlanner: LLM-Assisted Manual-Compiled Task Planning with Proactive Safety Verification for Robotic Industrial Panel Operation28 Aug 2026
- 2026Security of Foundation-Model-Powered Embodied Agents: Attack Surfaces, Attacks, Defenses, and Evaluation17 Aug 2026
- 2026GraphThink: Graph-Enhanced LLM Thinking for Long-Horizon Embodied Task Planning8 Aug 2026
- 2026When Words Are Safe But Actions Kill: Probing Physical Jailbreak Beyond Textual Jailbreak in Hidden-State Risk Space16 Jul 2026
- 2026A Hierarchical Error-Corrective Graph Framework for Autonomous Agents with LLM-Based Action Generation9 Mar 2026
- 2025From Code Foundation Models to Agents and Applications: A Comprehensive Survey and Practical Guide to Code Intelligence23 Nov 2025
- 2025VeriSafe Agent: Safeguarding Mobile GUI Agent via Logic-based Action Verification24 Mar 2025
Similar, not cited
Close in wording, no citation either way
- 2025Safety Aware Task Planning via Large Language Models in Robotics
- 2026SafeGen-LLM: Enhancing Safety Generalization in Task Planning for Robotic Systems
- 2023Plug in the Safety Chip: Enforcing Constraints for LLM-driven Robot Agents
- 2025A Framework for Benchmarking and Aligning Task-Planning Safety in LLM-Based Embodied Agents
- 2026Using large language models for embodied planning introduces systematic safety risks
- 2025Safety Guardrails for LLM-Enabled Robots
- 2025Trust in LLM-controlled Robotics: a Survey of Security Threats, Defenses and Challenges
- 2025SafeMind: Benchmarking and Mitigating Safety Risks in Embodied LLM Agents