mlsanityData to 14 Oct 2026

Safety Degradation in AI Agents

arXiv 2505.14215 ↗First posted 20 May 2025cs.CYcited by 2

On the map: LLM agents and tool use → Agent threats, guardrails and governance

Abstract (arXiv)

Despite the growing integration of retrieval-enabled AI agents into society, their safety and ethical behavior remain inadequately understood. In particular, the integration of LLMs and AI agents with external information sources and real-world environments raises critical questions about how they engage with and are influenced by these external data sources and interactive contexts. This study investigates how expanding retrieval access -- from no external sources to Wikipedia-based retrieval and open web search -- affects model reliability, bias propagation, and harmful content generation. Through extensive benchmarking of censored and uncensored LLMs and AI agents, our findings reveal a consistent degradation in refusal rates, bias sensitivity, and harmfulness safeguards as models gain broader access to external sources, culminating in a phenomenon we term safety degradation. Notably, retrieval-enabled agents built on aligned LLMs often behave more unsafely than uncensored models without retrieval. This effect persists even under strong retrieval accuracy and prompt-based mitigation, suggesting that the mere presence of retrieved content reshapes model behavior in structurally unsafe ways. These findings underscore the need for robust mitigation strategies to ensure fairness and reliability in retrieval-enabled and increasingly autonomous AI systems.

Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 42 of its 55 references that are in the map. First posted on arXiv 20 May 2025.

Builds on

42 of 55 references.

Closest ancestors · 2

Same direction, newest first

  1. 2025SafeArena: Evaluating the Safety of Autonomous Web Agents6 Mar
  2. 2024R-Judge: Benchmarking Safety Risk Awareness for LLM Agents18 Jan

Other references · 40

  1. 2023GPT-4 Technical Reportcited by 18,396
  2. 2022Training language models to follow instructions with human feedbackcited by 15,971
  3. 2024The Llama 3 Herd of Modelscited by 14,715
  4. 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,297
  5. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
  6. 2024Qwen2 Technical Reportcited by 2,120
  7. 2023WebArena: A Realistic Web Environment for Building Autonomous Agentscited by 2,006
  8. 2023ToolLLM: Facilitating Large Language Models to Master 16000+ Real-world APIscited by 1,947
  9. 2019A Survey on Bias and Fairness in Machine Learningcited by 1,917
  10. 2025Gemma 3 Technical Reportcited by 1,824
  11. 2024A Survey on LLM-as-a-Judgecited by 1,423
  12. 2023AgentBench: Evaluating LLMs as Agentscited by 1,267
28 more
  1. 2023Mind2Web: Towards a Generalist Agent for the Webcited by 1,242
  2. 2024Refusal in Language Models Is Mediated by a Single Directioncited by 1,032
  3. 2022Red Teaming Language Models with Language Modelscited by 1,026
  4. 2023DSPy: Compiling Declarative Language Model Calls into Self-Improving Pipelinescited by 832
  5. 2021BBQ: A Hand-Built Bias Benchmark for Question Answeringcited by 701
  6. 2021Retrieval Augmentation Reduces Hallucination in Conversationcited by 692
  7. 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 505
  8. 2024Prometheus 2: An Open Source Language Model Specialized in Evaluating Other Language Modelscited by 446
  9. 2023Large Language Models as Tool Makerscited by 303
  10. 2024PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Modelscited by 267
  11. 2024AI Agents That Mattercited by 219
  12. 2020HoVer: A Dataset for Many-Hop Fact Extraction And Claim Verificationcited by 201
  13. 2024Bias and Unfairness in Information Retrieval Systems: New Challenges in the LLM Eracited by 98
  14. 2024BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Modelscited by 86
  15. 2024Trustworthiness in Retrieval-Augmented Generation Systems: A Surveycited by 83
  16. 2024Agent-E: From Autonomous Web Navigation to Foundational Design Principles in Agentic Systemscited by 81
  17. 2024AIR-Bench 2024: A Safety Benchmark Based on Risk Categories from Regulations and Policiescited by 74
  18. 2024Reliable, Adaptable, and Attributable Language Models with Retrievalcited by 73
  19. 2024Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoningcited by 64
  20. 2024Safetywashing: Do AI Safety Benchmarks Actually Measure Safety Progress?cited by 61
  21. 2024Does RAG Introduce Unfairness in LLMs? Evaluating Fairness in Retrieval-Augmented Generation Systemscited by 26
  22. 2025RAG LLMs are Not Safer: A Safety Analysis of Retrieval-Augmented Generation for Large Language Modelscited by 24
  23. 2024Black-Box Opinion Manipulation Attacks to Retrieval-Augmented Generation of Large Language Modelscited by 11
  24. 2025Out of Style: RAG's Fragility to Linguistic Variationcited by 11
  25. 2024No Free Lunch: Retrieval-Augmented Generation Undermines Fairness in LLMs, Even for Vigilant Userscited by 9
  26. 2021Beyond Algorithmic Bias: A Socio-Computational Interrogation of the Google Search by Image Algorithmcited by 5
  27. 2025Exploiting Instruction-Following Retrievers for Malicious Information Retrievalcited by 4
  28. 2023Examining bias perpetuation in academic search engines: an algorithm audit of Google and Semantic Scholarcited by 1

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 2.

2 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026Relevance as a Vulnerability: How Web Retrieval Degrades Safety Alignment in LLM Agents
  2. 2026Retrieval Collapses When AI Pollutes the Web
  3. 2025SafeSearch: Do Not Trade Safety for Utility in LLM Search Agents
  4. 2025Bias Mitigation Agent: Optimizing Source Selection for Fair and Balanced Knowledge Retrieval
  5. 2025Why Are Web AI Agents More Vulnerable Than Standalone LLMs? A Security Analysis
  6. 2025HarmTransform: Transforming Explicit Harmful Queries into Stealthy via Multi-Agent Debate
  7. 2025Aetheria: A multimodal interpretable content safety framework based on multi-agent debate and collaboration
  8. 2025SafeSearch: Automated Red-Teaming of LLM-Based Search Agents