mlsanityData to 7 Oct 2026

Multimodal Safety Evaluation in Generative Agent Social Simulations

arXiv 2510.07709 ↗First posted 9 Oct 2025cs.AI cs.CL cs.CYcited by 5

On the map: LLM agents and tool use → Agent threats, guardrails and governance

Abstract (arXiv)

Can generative agents be trusted in multimodal environments? Despite advances in large language and vision-language models that enable agents to act autonomously and pursue goals in rich settings, their ability to reason about safety, coherence, and trust across modalities remains limited. We introduce a reproducible simulation framework for evaluating agents along three dimensions: (1) safety improvement over time, including iterative plan revisions in text-visual scenarios; (2) detection of unsafe activities across multiple categories of social situations; and (3) social dynamics, measured as interaction counts and acceptance ratios of social exchanges. Agents are equipped with layered memory, dynamic planning, multimodal perception, and are instrumented with SocialMetrics, a suite of behavioral and structural metrics that quantifies plan revisions, unsafe-to-safe conversions, and information diffusion across networks. Experiments show that while agents can detect direct multimodal contradictions, they often fail to align local revisions with global safety, reaching only a 55 percent success rate in correcting unsafe plans. Across eight simulation runs with three models - Claude, GPT-4o mini, and Qwen-VL - five agents achieved average unsafe-to-safe conversion rates of 75, 55, and 58 percent, respectively. Overall performance ranged from 20 percent in multi-risk scenarios with GPT-4o mini to 98 percent in localized contexts such as fire/heat with Claude. Notably, 45 percent of unsafe actions were accepted when paired with misleading visuals, showing a strong tendency to overtrust images. These findings expose critical limitations in current architectures and provide a reproducible platform for studying multimodal safety, coherence, and social dynamics.

Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 19 of its 33 references that are in the map. First posted on arXiv 9 Oct 2025.

Builds on

19 of 33 references.

Closest ancestors · 1

Same direction, newest first

  1. 2023Evil Geniuses: Delving into the Safety of LLM-based Agents20 Nov

Other references · 18

  1. 2023Visual Instruction Tuningcited by 7,792
  2. 2022Flamingo: a Visual Language Model for Few-Shot Learningcited by 4,337
  3. 2023Generative Agents: Interactive Simulacra of Human Behaviorcited by 3,500
  4. 2023AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversationcited by 1,906
  5. 2023CAMEL: Communicative Agents for "Mind" Exploration of Large Language Model Societycited by 1,348
  6. 2023AgentVerse: Facilitating Multi-Agent Collaboration and Exploring Emergent Behaviorscited by 580
  7. 2023FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Promptscited by 368
  8. 2023Visual Adversarial Examples Jailbreak Aligned Large Language Modelscited by 307
  9. 2023Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal Language Modelscited by 260
  10. 2023MM-SafetyBench: A Benchmark for Safety Evaluation of Multimodal Large Language Modelscited by 255
  11. 2023OpenAgents: An Open Platform for Language Agents in the Wildcited by 136
  12. 2025OWL: Optimized Workforce Learning for General Multi-Agent Assistance in Real-World Task Automationcited by 129
6 more
  1. 2024OASIS: Open Agent Social Interaction Simulations with One Million Agentscited by 127
  2. 2024ScreenAgent: A Vision Language Model-driven Computer Control Agentcited by 101
  3. 2024On the Resilience of LLM-Based Multi-Agent Collaboration with Faulty Agentscited by 92
  4. 2024MultiTrust: A Comprehensive Benchmark Towards Trustworthy Multimodal Large Language Modelscited by 51
  5. 2024AgentSense: Benchmarking Social Intelligence of Language Agents through Interactive Scenarioscited by 37
  6. 2025Building Trustworthy Multimodal AI: A Review of Fairness, Transparency, and Ethics in Vision-Language Taskscited by 7

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 1; 2026: 4.

5 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2024SafeAgentBench: A Benchmark for Safe Task Planning of Embodied LLM Agents
  2. 2025SafeMind: Benchmarking and Mitigating Safety Risks in Embodied LLM Agents
  3. 2025A Framework for Benchmarking and Aligning Task-Planning Safety in LLM-Based Embodied Agents
  4. 2026Agentic Microphysics: A Manifesto for Generative AI Safety
  5. 2025Agentic Moderation: Multi-Agent Design for Safer Vision-Language Models
  6. 2025AGENTSAFE: Benchmarking the Safety of Embodied Agents on Hazardous Instructions
  7. 2026Stop Drawing Scientific Claims from LLM Social Simulations Without Robustness Audits
  8. 2026QUACK: Questioning, Understanding, and Auditing Communicated Knowledge in Multimodal Social Deduction Agents