mlsanityData to 14 Oct 2026

AgenticEval: Toward Agentic and Self-Evolving Safety Evaluation of Large Language Models

arXiv 2509.26100 ↗First posted 30 Sep 2025cs.AIcited by 9

On the map: LLM agents and tool use → Agent threats, guardrails and governance

also in 1 more
Abstract (arXiv)

The rapid integration of Large Language Models (LLMs) into high-stakes domains necessitates reliable safety and compliance evaluation. However, existing static benchmarks are ill-equipped to address the dynamic nature of AI risks and evolving regulations, creating a critical safety gap. This paper introduces a new paradigm of agentic safety evaluation, reframing evaluation as a continuous and self-evolving process rather than a one-time audit. We then propose a novel multi-agent framework AgenticEval, which autonomously ingests unstructured policy documents to generate and perpetually evolve a comprehensive safety benchmark. AgenticEval leverages a synergistic pipeline of specialized agents and incorporates a Self-evolving Evaluation loop, where the system learns from evaluation results to craft progressively more sophisticated and targeted test cases. Our experiments demonstrate the effectiveness of AgenticEval, showing a consistent decline in model safety as the evaluation hardens. For instance, GPT-5's safety rate on the EU AI Act drops from 72.50% to 36.36% over successive iterations. These findings reveal the limitations of static assessments and highlight our framework's ability to uncover deep vulnerabilities missed by traditional methods, underscoring the urgent need for dynamic evaluation ecosystems to ensure the safe and responsible deployment of advanced AI.

Key facts. Cited by 9 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 12 of its 23 references that are in the map. First posted on arXiv 30 Sep 2025.

Builds on

12 of 23 references.

Closest ancestors · 1

Same direction, newest first

  1. 2025ShieldAgent: Shielding Agents via Verifiable Safety Policy Reasoning26 Mar

Other references · 11

  1. 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 518
  2. 2018AI safety via debatecited by 400
  3. 2023PIXIU: A Large Language Model, Instruction Data and Evaluation Benchmark for Financecited by 222
  4. 2024AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMscited by 199
  5. 2023InvestLM: A Large Language Model for Investment using Financial Domain Instruction Tuningcited by 82
  6. 2024ALI-Agent: Assessing LLMs' Alignment with Human Values via Agent-based Evaluationcited by 47
  7. 2025AutoRedTeamer: Autonomous Red Teaming with Lifelong Attack Integrationcited by 43
  8. 2024Evaluation Agent: Efficient and Promptable Evaluation Framework for Visual Generative Modelscited by 41
  9. 2023Fake Alignment: Are LLMs Really Aligned Well?cited by 39
  10. 2025PolicyPulse: LLM-Synthesis Tool for Policy Researcherscited by 4
  11. 2025Passing the Turing Test in Political Discourse: Fine-Tuning LLMs to Mimic Polarized Social Media Commentscited by 1

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 1; 2026: 8.

9 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety
  2. 2024Agent-SafetyBench: Evaluating the Safety of LLM Agents
  3. 2026Risky-Bench: Probing Agentic Safety Risks under Real-World Deployment
  4. 2026Enhancing Agent Safety Judgment: Controlled Benchmark Rewriting and Analogical Reasoning for Deceptive Out-of-Distribution Scenarios
  5. 2026Taxonomy and Consistency Analysis of Safety Benchmarks for AI Agents
  6. 2025SafetyFlow: An Agent-Flow System for Automated LLM Safety Benchmarking
  7. 2024R-Judge: Benchmarking Safety Risk Awareness for LLM Agents
  8. 2025Beyond Reactive Safety: Risk-Aware LLM Alignment via Long-Horizon Simulation