Enhancing LLM Agent Safety via Causal Influence Prompting
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
As autonomous agents powered by large language models (LLMs) continue to demonstrate potential across various assistive tasks, ensuring their safe and reliable behavior is crucial for preventing unintended consequences. In this work, we introduce CIP, a novel technique that leverages causal influence diagrams (CIDs) to identify and mitigate risks arising from agent decision-making. CIDs provide a structured representation of cause-and-effect relationships, enabling agents to anticipate harmful outcomes and make safer decisions. Our approach consists of three key steps: (1) initializing a CID based on task specifications to outline the decision-making process, (2) guiding agent interactions with the environment using the CID, and (3) iteratively refining the CID based on observed behaviors and outcomes. Experimental results demonstrate that our method effectively enhances safety in both code execution and mobile device control tasks.
Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 20 of its 32 references that are in the map. First posted on arXiv 1 Jul 2025.
Builds on
20 of 32 references.
Closest ancestors · 6
Same direction, newest first
- 2024RedCode: Risky Code Execution and Generation Benchmark for Code Agents12 Nov
- 2024When LLMs Go Online: The Emerging Threat of Web-Enabled LLMs18 Oct
- 2024AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents11 Oct
- 2024AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Bases17 Jul
- 2024GuardAgent: Safeguard LLM Agents by a Guard Agent via Knowledge-Enabled Reasoning13 Jun
- 2023Identifying the Risks of LM Agents with an LM-Emulated Sandbox25 Sep
Other references · 14
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,355
- 2023SWE-bench: Can Language Models Resolve Real-World GitHub Issues?cited by 3,193
- 2023WebArena: A Realistic Web Environment for Building Autonomous Agentscited by 1,908
- 2022Fast Inference from Transformers via Speculative Decodingcited by 1,615
- 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,339
- 2022WebShop: Towards Scalable Real-World Web Interaction with Grounded Language Agentscited by 1,197
- 2024Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attackscited by 450
- 2024AndroidWorld: A Dynamic Benchmarking Environment for Autonomous Agentscited by 450
- 2016The Off-Switch Gamecited by 97
- 2024Robust agents learn causal world modelscited by 81
- 2024Benchmarking Mobile Device Control Agents across Diverse Configurationscited by 54
- 2021Agent Incentives: A Causal Perspectivecited by 51
Built on by
Citing papers per year: 2025: 3; 2026: 2.
5 papers.
- 2025Building a Foundational Guardrail for General Agentic Systems via Synthetic Datacited by 26
- 2025From Code Foundation Models to Agents and Applications: A Comprehensive Survey and Practical Guide to Code Intelligencecited by 13
- 2026Aligning Provenance with Authorization: A Dual-Graph Defense for LLM Agentscited by 12
- 2025When "Correct" Is Not Safe: Can We Trust Functionally Correct Patches Generated by Code Agents?cited by 2
- 2026Trajectory Unlearning on LLM-based Agentscited by 0
- 2026Trajectory Unlearning on LLM-based Agents27 Sep 2026
- 2026Aligning Provenance with Authorization: A Dual-Graph Defense for LLM Agents26 May 2026
- 2025From Code Foundation Models to Agents and Applications: A Comprehensive Survey and Practical Guide to Code Intelligence23 Nov 2025
- 2025When "Correct" Is Not Safe: Can We Trust Functionally Correct Patches Generated by Code Agents?15 Oct 2025
- 2025Building a Foundational Guardrail for General Agentic Systems via Synthetic Data10 Oct 2025
Similar, not cited
Close in wording, no citation either way
- 2024R-Judge: Benchmarking Safety Risk Awareness for LLM Agents
- 2026ForesightSafety-SAGE:A Fully Automated Scenario Generation and Safety Evaluation Framework for LLM Agents
- 2024Concept-Guided LLM Agents for Human-AI Safety Codesign
- 2025ManagerBench: Evaluating the Safety-Pragmatism Trade-off in Autonomous LLMs
- 2025Beyond Reactive Safety: Risk-Aware LLM Alignment via Long-Horizon Simulation
- 2025SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator
- 2025Think Twice Before You Act: Enhancing Agent Behavioral Safety with Thought Correction
- 2026PASTABench: Proactive Assessment of Sequential Trajectories for Agent Safety