Safety Aware Task Planning via Large Language Models in Robotics
On the map: LLM reasoning → Spatial and embodied reasoning
Abstract (arXiv)
The integration of large language models (LLMs) into robotic task planning has unlocked better reasoning capabilities for complex, long-horizon workflows. However, ensuring safety in LLM-driven plans remains a critical challenge, as these models often prioritize task completion over risk mitigation. This paper introduces SAFER (Safety-Aware Framework for Execution in Robotics), a multi-LLM framework designed to embed safety awareness into robotic task planning. SAFER employs a Safety Agent that operates alongside the primary task planner, providing safety feedback. Additionally, we introduce LLM-as-a-Judge, a novel metric leveraging LLMs as evaluators to quantify safety violations within generated task plans. Our framework integrates safety feedback at multiple stages of execution, enabling real-time risk assessment, proactive error correction, and transparent safety evaluation. We also integrate a control framework using Control Barrier Functions (CBFs) to ensure safety guarantees within SAFER's task planning. We evaluated SAFER against state-of-the-art LLM planners on complex long-horizon tasks involving heterogeneous robotic agents, demonstrating its effectiveness in reducing safety violations while maintaining task efficiency. We also verify the task planner and safety planner through actual hardware experiments involving multiple robots and a human.
Key facts. Cited by 24 papers in the map (data through 7 Oct 2026). Placed in Spatial and embodied reasoning, one of 17 directions in LLM reasoning. Builds on 28 of its 46 references that are in the map. First posted on arXiv 19 Mar 2025.
Builds on
28 of 46 references.
Closest ancestors · 4
Same direction, newest first
- 2024AHA: A Vision-Language-Model for Detecting and Reasoning Over Failures in Robotic Manipulation1 Oct
- 2024COHERENT: Collaboration of Heterogeneous Multi-Robot System with Large Language Models23 Sep
- 2023Plug in the Safety Chip: Enforcing Constraints for LLM-driven Robot Agents18 Sep
- 2023EmbodiedGPT: Vision-Language Pre-Training via Embodied Chain of Thought24 May
Other references · 24
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2022Large Language Models are Zero-Shot Reasonerscited by 4,323
- 2022Do As I Can, Not As I Say: Grounding Language in Robotic Affordancescited by 2,302
- 2023PaLM-E: An Embodied Multimodal Language Modelcited by 2,037
- 2024A Survey on LLM-as-a-Judgecited by 1,384
- 2022Code as Policies: Language Model Programs for Embodied Controlcited by 1,172
- 2022Language Models as Zero-Shot Planners: Extracting Actionable Knowledge for Embodied Agentscited by 1,029
- 2024LLM Evaluators Recognize and Favor Their Own Generationscited by 651
- 2019Control Barrier Functions: Theory and Applicationscited by 332
- 2023Building Cooperative Embodied Agents Modularly with Large Language Modelscited by 231
- 2023Text2Motion: From Natural Language Instructions to Feasible Planscited by 223
- 2023LanguageMPC: Large Language Models as Decision Makers for Autonomous Drivingcited by 188
12 more
- 2023SMART-LLM: Smart Multi-Agent Robot Task Planning using Large Language Modelscited by 151
- 2023Large Language Models for Robotics: A Surveycited by 132
- 2024Pride and Prejudice: LLM Amplifies Self-Bias in Self-Refinementcited by 111
- 2023Discuss Before Moving: Visual Language Navigation via Multi-expert Discussionscited by 108
- 2024SafeAgentBench: A Benchmark for Safe Task Planning of Embodied LLM Agentscited by 102
- 2024CodeJudge: Evaluating Code Generation with Large Language Modelscited by 41
- 2023Interactive Planning Using Large Language Models for Partially Observable Robotics Taskscited by 27
- 2020Comparative Analysis of Control Barrier Functions and Artificial Potential Fields for Obstacle Avoidancecited by 8
- 2024PhysicsAssistant: An LLM-Powered Interactive Learning Robot for Physics Lab Investigationscited by 8
- 2024Safety Control of Service Robots with LLMs and Embodied Knowledge Graphscited by 7
- 2017Safe Certificate-Based Maneuvers for Teams of Quadrotors Using Differential Flatnesscited by 5
- 2024GRACE: Generating Socially Appropriate Robot Actions Leveraging LLMs and Human Explanationscited by 3
Built on by
Citing papers per year: 2025: 12; 2026: 12.
24 papers.
Sort:
By area:
- 2025Can AI Perceive Physical Danger and Intervene?cited by 12
- 2026AEROS: A Single-Agent Operating Architecture with Embodied Capability Modulescited by 6
- 2025MADRA: Multi-Agent Debate for Risk-Aware Embodied Planningcited by 4
- 2025Compositional Coordination for Multi-Robot Teams with Large Language Modelscited by 3
- 2026Harness Engineering for Physical AI: Robot Middleware Is the Harness Layercited by 3
- 2025Hallucination-Aware Generative Pretrained Transformer for Cooperative Aerial Mobility Controlcited by 2
- 2025LVLM-MPC Collaboration for Autonomous Driving: A Safety-Aware and Task-Scalable Control Architecturecited by 2
- 2025Grounding Language Models with Semantic Digital Twins for Robotic Planningcited by 2
- 2025HyCodePolicy: Hybrid Language Controllers for Multimodal Monitoring and Decision in Embodied Agentscited by 2
- 2026LabGuard: Grounding Natural-Language Laboratory Rules into Runtime Guards for Embodied Laboratory Agentscited by 2
- 2025Understanding Physical Properties of Unseen Deformable Objects by Leveraging Large Language Models and Robot Actionscited by 1
- 2025RoboPARA: Dual-Arm Robot Planning with Parallel Allocation and Recomposition Across Taskscited by 1
12 more
- 2025Human Centric General Physical Intelligence for Agile Manufacturing Automationcited by 1
- 2025ResponsibleRobotBench: Benchmarking Responsible Robot Manipulation using Multi-modal Large Language Modelscited by 1
- 2026A Hazard-Informed Data Pipeline for Robotics Physical Safetycited by 1
- 2026Position: A Three-Layer Probabilistic Assume-Guarantee Architecture Is Structurally Required for Safe LLM Agent Deploymentcited by 1
- 2026EMBGuard: Constructing Hazard-Aware Guardrails for Safe Planning in Embodied Agentscited by 1
- 2025Semantic Intelligence: Integrating GPT-4 with A Planning in Low-Cost Roboticscited by 0
- 2026Agentic Harnesses: LLM-Driven Verification Layers for Robot Autonomycited by 0
- 2026MaCoPlanner: LLM-Assisted Manual-Compiled Task Planning with Proactive Safety Verification for Robotic Industrial Panel Operationcited by 0
- 2026PanelShield: Verifiable Closed-Loop Safe Planning for Robotic Industrial Panel Operationcited by 0
- 2026Safe Task Planning with Long-Term Graph Memory for Embodied Agentscited by 0
- 2026Large Language Models in the Loop: A Stability- and Network-Aware Survey in Networked Control, Cyber-Physical, and Multi-Agent Systemscited by 0
- 2026Security and Privacy in Large-Model-Driven Embodied Agents: Attacks, Defenses, and Future Directionscited by 0
- 2026Large Language Models in the Loop: A Stability- and Network-Aware Survey in Networked Control, Cyber-Physical, and Multi-Agent Systems15 Sep 2026
- 2026Safe Task Planning with Long-Term Graph Memory for Embodied Agents8 Sep 2026
- 2026PanelShield: Verifiable Closed-Loop Safe Planning for Robotic Industrial Panel Operation28 Aug 2026
- 2026MaCoPlanner: LLM-Assisted Manual-Compiled Task Planning with Proactive Safety Verification for Robotic Industrial Panel Operation28 Aug 2026
- 2026Security and Privacy in Large-Model-Driven Embodied Agents: Attacks, Defenses, and Future Directions19 Aug 2026
- 2026Agentic Harnesses: LLM-Driven Verification Layers for Robot Autonomy10 Aug 2026
- 2026LabGuard: Grounding Natural-Language Laboratory Rules into Runtime Guards for Embodied Laboratory Agents30 Jun 2026
- 2026Harness Engineering for Physical AI: Robot Middleware Is the Harness Layer8 Jun 2026
- 2026EMBGuard: Constructing Hazard-Aware Guardrails for Safe Planning in Embodied Agents29 May 2026
- 2026Position: A Three-Layer Probabilistic Assume-Guarantee Architecture Is Structurally Required for Safe LLM Agent Deployment18 May 2026
- 2026AEROS: A Single-Agent Operating Architecture with Embodied Capability Modules8 Apr 2026
- 2026A Hazard-Informed Data Pipeline for Robotics Physical Safety6 Mar 2026
12 more
- 2025ResponsibleRobotBench: Benchmarking Responsible Robot Manipulation using Multi-modal Large Language Models3 Dec 2025
- 2025MADRA: Multi-Agent Debate for Risk-Aware Embodied Planning26 Nov 2025
- 2025Can AI Perceive Physical Danger and Intervene?25 Sep 2025
- 2025Human Centric General Physical Intelligence for Agile Manufacturing Automation16 Aug 2025
- 2025HyCodePolicy: Hybrid Language Controllers for Multimodal Monitoring and Decision in Embodied Agents4 Aug 2025
- 2025Compositional Coordination for Multi-Robot Teams with Large Language Models21 Jul 2025
- 2025Grounding Language Models with Semantic Digital Twins for Robotic Planning19 Jun 2025
- 2025RoboPARA: Dual-Arm Robot Planning with Parallel Allocation and Recomposition Across Tasks7 Jun 2025
- 2025Understanding Physical Properties of Unseen Deformable Objects by Leveraging Large Language Models and Robot Actions4 Jun 2025
- 2025LVLM-MPC Collaboration for Autonomous Driving: A Safety-Aware and Task-Scalable Control Architecture8 May 2025
- 2025Semantic Intelligence: Integrating GPT-4 with A Planning in Low-Cost Robotics3 May 2025
- 2025Hallucination-Aware Generative Pretrained Transformer for Cooperative Aerial Mobility Control15 Apr 2025
- 2025MADRA: Multi-Agent Debate for Risk-Aware Embodied Planningcited by 4
- 2026Position: A Three-Layer Probabilistic Assume-Guarantee Architecture Is Structurally Required for Safe LLM Agent Deploymentcited by 1
- 2026EMBGuard: Constructing Hazard-Aware Guardrails for Safe Planning in Embodied Agentscited by 1
- 2026Agentic Harnesses: LLM-Driven Verification Layers for Robot Autonomycited by 0
- 2026Large Language Models in the Loop: A Stability- and Network-Aware Survey in Networked Control, Cyber-Physical, and Multi-Agent Systemscited by 0
- 2026Security and Privacy in Large-Model-Driven Embodied Agents: Attacks, Defenses, and Future Directionscited by 0
- 2026Large Language Models in the Loop: A Stability- and Network-Aware Survey in Networked Control, Cyber-Physical, and Multi-Agent Systems15 Sep 2026
- 2026Security and Privacy in Large-Model-Driven Embodied Agents: Attacks, Defenses, and Future Directions19 Aug 2026
- 2026Agentic Harnesses: LLM-Driven Verification Layers for Robot Autonomy10 Aug 2026
- 2026EMBGuard: Constructing Hazard-Aware Guardrails for Safe Planning in Embodied Agents29 May 2026
- 2026Position: A Three-Layer Probabilistic Assume-Guarantee Architecture Is Structurally Required for Safe LLM Agent Deployment18 May 2026
- 2025MADRA: Multi-Agent Debate for Risk-Aware Embodied Planning26 Nov 2025
- 2025HyCodePolicy: Hybrid Language Controllers for Multimodal Monitoring and Decision in Embodied Agentscited by 2
- 2025ResponsibleRobotBench: Benchmarking Responsible Robot Manipulation using Multi-modal Large Language Modelscited by 1
- 2026Safe Task Planning with Long-Term Graph Memory for Embodied Agentscited by 0
- 2026Safe Task Planning with Long-Term Graph Memory for Embodied Agents8 Sep 2026
- 2025ResponsibleRobotBench: Benchmarking Responsible Robot Manipulation using Multi-modal Large Language Models3 Dec 2025
- 2025HyCodePolicy: Hybrid Language Controllers for Multimodal Monitoring and Decision in Embodied Agents4 Aug 2025
- 2025Can AI Perceive Physical Danger and Intervene?cited by 12
- 2026AEROS: A Single-Agent Operating Architecture with Embodied Capability Modulescited by 6
- 2025Compositional Coordination for Multi-Robot Teams with Large Language Modelscited by 3
- 2026Harness Engineering for Physical AI: Robot Middleware Is the Harness Layercited by 3
- 2025Hallucination-Aware Generative Pretrained Transformer for Cooperative Aerial Mobility Controlcited by 2
- 2025Grounding Language Models with Semantic Digital Twins for Robotic Planningcited by 2
- 2026LabGuard: Grounding Natural-Language Laboratory Rules into Runtime Guards for Embodied Laboratory Agentscited by 2
- 2025Understanding Physical Properties of Unseen Deformable Objects by Leveraging Large Language Models and Robot Actionscited by 1
- 2025RoboPARA: Dual-Arm Robot Planning with Parallel Allocation and Recomposition Across Taskscited by 1
- 2026A Hazard-Informed Data Pipeline for Robotics Physical Safetycited by 1
- 2025Semantic Intelligence: Integrating GPT-4 with A Planning in Low-Cost Roboticscited by 0
- 2026MaCoPlanner: LLM-Assisted Manual-Compiled Task Planning with Proactive Safety Verification for Robotic Industrial Panel Operationcited by 0
12 most cited of 13 All 13 (JSON)
- 2026PanelShield: Verifiable Closed-Loop Safe Planning for Robotic Industrial Panel Operation28 Aug 2026
- 2026MaCoPlanner: LLM-Assisted Manual-Compiled Task Planning with Proactive Safety Verification for Robotic Industrial Panel Operation28 Aug 2026
- 2026LabGuard: Grounding Natural-Language Laboratory Rules into Runtime Guards for Embodied Laboratory Agents30 Jun 2026
- 2026Harness Engineering for Physical AI: Robot Middleware Is the Harness Layer8 Jun 2026
- 2026AEROS: A Single-Agent Operating Architecture with Embodied Capability Modules8 Apr 2026
- 2026A Hazard-Informed Data Pipeline for Robotics Physical Safety6 Mar 2026
- 2025Can AI Perceive Physical Danger and Intervene?25 Sep 2025
- 2025Compositional Coordination for Multi-Robot Teams with Large Language Models21 Jul 2025
- 2025Grounding Language Models with Semantic Digital Twins for Robotic Planning19 Jun 2025
- 2025RoboPARA: Dual-Arm Robot Planning with Parallel Allocation and Recomposition Across Tasks7 Jun 2025
- 2025Understanding Physical Properties of Unseen Deformable Objects by Leveraging Large Language Models and Robot Actions4 Jun 2025
- 2025Semantic Intelligence: Integrating GPT-4 with A Planning in Low-Cost Robotics3 May 2025
12 newest of 13 All 13 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2025SafePlan: Leveraging Formal Logic and Chain-of-Thought Reasoning for Enhanced Safety in LLM-based Robotic Task Planning
- 2026SafeGen-LLM: Enhancing Safety Generalization in Task Planning for Robotic Systems
- 2026Using large language models for embodied planning introduces systematic safety risks
- 2025A Framework for Benchmarking and Aligning Task-Planning Safety in LLM-Based Embodied Agents
- 2026S3: Improving Agent Safety through Multi-Stage Defense
- 2025SafeMind: Benchmarking and Mitigating Safety Risks in Embodied LLM Agents
- 2024R-Judge: Benchmarking Safety Risk Awareness for LLM Agents
- 2026ForesightSafety-SAGE:A Fully Automated Scenario Generation and Safety Evaluation Framework for LLM Agents