mlsanityData to 7 Oct 2026

Enhancing LLM Agent Safety via Causal Influence Prompting

arXiv 2507.00979 ↗First posted 1 Jul 2025cs.AI cs.CL cs.LGcited by 5

On the map: LLM agents and tool use → Agent threats, guardrails and governance

Abstract (arXiv)

As autonomous agents powered by large language models (LLMs) continue to demonstrate potential across various assistive tasks, ensuring their safe and reliable behavior is crucial for preventing unintended consequences. In this work, we introduce CIP, a novel technique that leverages causal influence diagrams (CIDs) to identify and mitigate risks arising from agent decision-making. CIDs provide a structured representation of cause-and-effect relationships, enabling agents to anticipate harmful outcomes and make safer decisions. Our approach consists of three key steps: (1) initializing a CID based on task specifications to outline the decision-making process, (2) guiding agent interactions with the environment using the CID, and (3) iteratively refining the CID based on observed behaviors and outcomes. Experimental results demonstrate that our method effectively enhances safety in both code execution and mobile device control tasks.

Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 20 of its 32 references that are in the map. First posted on arXiv 1 Jul 2025.

Builds on

20 of 32 references.

Closest ancestors · 6

Same direction, newest first

  1. 2024RedCode: Risky Code Execution and Generation Benchmark for Code Agents12 Nov
  2. 2024When LLMs Go Online: The Emerging Threat of Web-Enabled LLMs18 Oct
  3. 2024AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents11 Oct
  4. 2024AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Bases17 Jul
  5. 2024GuardAgent: Safeguard LLM Agents by a Guard Agent via Knowledge-Enabled Reasoning13 Jun
  6. 2023Identifying the Risks of LM Agents with an LM-Emulated Sandbox25 Sep

Other references · 14

  1. 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,355
  2. 2023SWE-bench: Can Language Models Resolve Real-World GitHub Issues?cited by 3,193
  3. 2023WebArena: A Realistic Web Environment for Building Autonomous Agentscited by 1,908
  4. 2022Fast Inference from Transformers via Speculative Decodingcited by 1,615
  5. 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,339
  6. 2022WebShop: Towards Scalable Real-World Web Interaction with Grounded Language Agentscited by 1,197
  7. 2024Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attackscited by 450
  8. 2024AndroidWorld: A Dynamic Benchmarking Environment for Autonomous Agentscited by 450
  9. 2016The Off-Switch Gamecited by 97
  10. 2024Robust agents learn causal world modelscited by 81
  11. 2024Benchmarking Mobile Device Control Agents across Diverse Configurationscited by 54
  12. 2021Agent Incentives: A Causal Perspectivecited by 51
2 more
  1. 2024MobileSafetyBench: Evaluating Safety of Autonomous Agents in Mobile Device Controlcited by 49
  2. 2023Honesty Is the Best Policy: Defining and Mitigating AI Deceptioncited by 40

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 3; 2026: 2.

5 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2024R-Judge: Benchmarking Safety Risk Awareness for LLM Agents
  2. 2026ForesightSafety-SAGE:A Fully Automated Scenario Generation and Safety Evaluation Framework for LLM Agents
  3. 2024Concept-Guided LLM Agents for Human-AI Safety Codesign
  4. 2025ManagerBench: Evaluating the Safety-Pragmatism Trade-off in Autonomous LLMs
  5. 2025Beyond Reactive Safety: Risk-Aware LLM Alignment via Long-Horizon Simulation
  6. 2025SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator
  7. 2025Think Twice Before You Act: Enhancing Agent Behavioral Safety with Thought Correction
  8. 2026PASTABench: Proactive Assessment of Sequential Trajectories for Agent Safety