An Adversary-Resistant Multi-Agent LLM System via Credibility Scoring
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
While multi-agent LLM systems show strong capabilities in various domains, they are highly vulnerable to adversarial and low-performing agents. To resolve this issue, in this paper, we introduce a general and adversary-resistant multi-agent LLM framework based on credibility scoring. We model the collaborative query-answering process as an iterative game, where the agents communicate and contribute to a final system output. Our system associates a credibility score that is used when aggregating the team outputs. The credibility scores are learned gradually based on the past contributions of each agent in query answering. Our experiments across multiple tasks and settings demonstrate our system's effectiveness in mitigating adversarial influence and enhancing the resilience of multi-agent cooperation, even in the adversary-majority settings.
Key facts. Cited by 10 papers in the map (data through 7 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 18 of its 44 references that are in the map. First posted on arXiv 30 May 2025.
Builds on
18 of 44 references.
References · 18
- 2021Training Verifiers to Solve Math Word Problemscited by 9,743
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,355
- 2021Evaluating Large Language Models Trained on Codecited by 8,053
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2017A Unified Approach to Interpreting Model Predictionscited by 6,488
- 2021Measuring Mathematical Problem Solving With the MATH Datasetcited by 5,203
- 2023MetaGPT: Meta Programming for A Multi-Agent Collaborative Frameworkcited by 1,761
- 2023Improving Factuality and Reasoning in Language Models through Multiagent Debatecited by 1,739
- 2023The Rise and Potential of Large Language Model Based Agents: A Surveycited by 1,422
- 2023CAMEL: Communicative Agents for "Mind" Exploration of Large Language Model Societycited by 1,348
- 2023Encouraging Divergent Thinking in Large Language Models through Multi-Agent Debatecited by 995
- 2024Mixture-of-Agents Enhances Large Language Model Capabilitiescited by 420
6 more
- 2023ReConcile: Round-Table Conference Improves Reasoning via Consensus among Diverse LLMscited by 297
- 2023Exploring Collaboration Mechanisms for LLM Agents: A Social Psychology Viewcited by 221
- 2024Chain of Agents: Large Language Models Collaborating on Long-Context Taskscited by 201
- 2024MultiAgent Collaboration Attack: Investigating Adversarial Attacks in Large Language Model Collaborations via Debatecited by 54
- 2024Smoothie: Label Free Language Model Routingcited by 31
- 2024Researchy Questions: A Dataset of Multi-Perspective, Decompositional Questions for LLM Web Agentscited by 22
Built on by
Citing papers per year: 2025: 3; 2026: 7.
10 papers.
- 2025A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasurescited by 54
- 2025SoK: Trust-Authorization Mismatch in LLM Agent Interactionscited by 11
- 2025Stochastic Self-Organization in Multi-Agent Systemscited by 9
- 2026When Latent Agents Lie: KV-Cache Integrity in Multi-Agent LLM Collaborationcited by 2
- 2026Response-Conditioned Parallel-to-Sequential Orchestration for Multi-Agent Systemscited by 1
- 2026MetaResearcher: Scaling Deep Research via Self-Reflective Reinforcement Learning in Adversarial Virtual Environmentscited by 1
- 2026Agents that Matter: Optimizing Multi-Agent LLMs via Removal-Based Attributioncited by 0
- 2026Grading the Narrators: An Isnad-Rijal Framework for Claim-Level Provenance in Multi-Agent Knowledge Systemscited by 0
- 2026Training-Free Inference-Time Self-Reflection and Cost-Bounded Early Stopping for Large Language Modelscited by 0
- 2026MiniRep: Robust Reputation-Based Aggregation for Multi-Agent Debatecited by 0
- 2026MiniRep: Robust Reputation-Based Aggregation for Multi-Agent Debate30 Sep 2026
- 2026Training-Free Inference-Time Self-Reflection and Cost-Bounded Early Stopping for Large Language Models19 Aug 2026
- 2026Grading the Narrators: An Isnad-Rijal Framework for Claim-Level Provenance in Multi-Agent Knowledge Systems27 Jul 2026
- 2026When Latent Agents Lie: KV-Cache Integrity in Multi-Agent LLM Collaboration27 Jun 2026
- 2026MetaResearcher: Scaling Deep Research via Self-Reflective Reinforcement Learning in Adversarial Virtual Environments18 Jun 2026
- 2026Agents that Matter: Optimizing Multi-Agent LLMs via Removal-Based Attribution26 May 2026
- 2026Response-Conditioned Parallel-to-Sequential Orchestration for Multi-Agent Systems15 May 2026
- 2025SoK: Trust-Authorization Mismatch in LLM Agent Interactions7 Dec 2025
- 2025Stochastic Self-Organization in Multi-Agent Systems1 Oct 2025
- 2025A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures24 Jun 2025
Similar, not cited
Close in wording, no citation either way
- 2026Defending LLM-based Multi-Agent Systems Against Cooperative Attacks with Sentence-Level Rectification
- 2025TAMAS: Benchmarking Adversarial Risks in Multi-Agent LLM Systems
- 2025Red-Teaming LLM Multi-Agent Systems via Communication Attacks
- 2026SGTO-MAS: Secure Gorilla Troops Optimization for Multi-Agent LLM Systems
- 2026Early-Token Confidence Predicts Reasoning Quality in Multi-Agent LLM Debate
- 2025To trust or not to trust: Attention-based Trust Management for LLM Multi-Agent Systems
- 2025SafeSieve: From Heuristics to Experience in Progressive Pruning for LLM-based Multi-Agent Communication
- 2026SMAC-Talk: A Natural Language Extension of the StarCraft Multi-Agent Challenge for Large Language Models