Multimodal Safety Evaluation in Generative Agent Social Simulations
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
Can generative agents be trusted in multimodal environments? Despite advances in large language and vision-language models that enable agents to act autonomously and pursue goals in rich settings, their ability to reason about safety, coherence, and trust across modalities remains limited. We introduce a reproducible simulation framework for evaluating agents along three dimensions: (1) safety improvement over time, including iterative plan revisions in text-visual scenarios; (2) detection of unsafe activities across multiple categories of social situations; and (3) social dynamics, measured as interaction counts and acceptance ratios of social exchanges. Agents are equipped with layered memory, dynamic planning, multimodal perception, and are instrumented with SocialMetrics, a suite of behavioral and structural metrics that quantifies plan revisions, unsafe-to-safe conversions, and information diffusion across networks. Experiments show that while agents can detect direct multimodal contradictions, they often fail to align local revisions with global safety, reaching only a 55 percent success rate in correcting unsafe plans. Across eight simulation runs with three models - Claude, GPT-4o mini, and Qwen-VL - five agents achieved average unsafe-to-safe conversion rates of 75, 55, and 58 percent, respectively. Overall performance ranged from 20 percent in multi-risk scenarios with GPT-4o mini to 98 percent in localized contexts such as fire/heat with Claude. Notably, 45 percent of unsafe actions were accepted when paired with misleading visuals, showing a strong tendency to overtrust images. These findings expose critical limitations in current architectures and provide a reproducible platform for studying multimodal safety, coherence, and social dynamics.
Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 19 of its 33 references that are in the map. First posted on arXiv 9 Oct 2025.
Builds on
19 of 33 references.
Closest ancestors · 1
Same direction, newest first
Other references · 18
- 2023Visual Instruction Tuningcited by 7,792
- 2022Flamingo: a Visual Language Model for Few-Shot Learningcited by 4,337
- 2023Generative Agents: Interactive Simulacra of Human Behaviorcited by 3,500
- 2023AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversationcited by 1,906
- 2023CAMEL: Communicative Agents for "Mind" Exploration of Large Language Model Societycited by 1,348
- 2023AgentVerse: Facilitating Multi-Agent Collaboration and Exploring Emergent Behaviorscited by 580
- 2023FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Promptscited by 368
- 2023Visual Adversarial Examples Jailbreak Aligned Large Language Modelscited by 307
- 2023Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal Language Modelscited by 260
- 2023MM-SafetyBench: A Benchmark for Safety Evaluation of Multimodal Large Language Modelscited by 255
- 2023OpenAgents: An Open Platform for Language Agents in the Wildcited by 136
- 2025OWL: Optimized Workforce Learning for General Multi-Agent Assistance in Real-World Task Automationcited by 129
6 more
- 2024OASIS: Open Agent Social Interaction Simulations with One Million Agentscited by 127
- 2024ScreenAgent: A Vision Language Model-driven Computer Control Agentcited by 101
- 2024On the Resilience of LLM-Based Multi-Agent Collaboration with Faulty Agentscited by 92
- 2024MultiTrust: A Comprehensive Benchmark Towards Trustworthy Multimodal Large Language Modelscited by 51
- 2024AgentSense: Benchmarking Social Intelligence of Language Agents through Interactive Scenarioscited by 37
- 2025Building Trustworthy Multimodal AI: A Review of Fairness, Transparency, and Ethics in Vision-Language Taskscited by 7
Built on by
Citing papers per year: 2025: 1; 2026: 4.
5 papers.
- 2026SAVeS: Steering Safety Judgments in Vision-Language Models via Semantic Cuescited by 4
- 2025Systematizing LLM Persona Design: A Four-Quadrant Technical Taxonomy for AI Companion Applicationscited by 0
- 2026HBEE: Human Behavioral Entropy Engine -- Pre-Registered Multi-Agent LLM Simulation of Peer-Suspicion-Based Detection Inversioncited by 0
- 2026Agentic Collaborative Cognition for Zero-Shot 3D Understandingcited by 0
- 2026SGA: Plug&Play Geometric Verification for Educational Video Synthesiscited by 0
- 2026SGA: Plug&Play Geometric Verification for Educational Video Synthesis20 Jul 2026
- 2026Agentic Collaborative Cognition for Zero-Shot 3D Understanding23 Jun 2026
- 2026HBEE: Human Behavioral Entropy Engine -- Pre-Registered Multi-Agent LLM Simulation of Peer-Suspicion-Based Detection Inversion8 May 2026
- 2026SAVeS: Steering Safety Judgments in Vision-Language Models via Semantic Cues19 Mar 2026
- 2025Systematizing LLM Persona Design: A Four-Quadrant Technical Taxonomy for AI Companion Applications4 Nov 2025
Similar, not cited
Close in wording, no citation either way
- 2024SafeAgentBench: A Benchmark for Safe Task Planning of Embodied LLM Agents
- 2025SafeMind: Benchmarking and Mitigating Safety Risks in Embodied LLM Agents
- 2025A Framework for Benchmarking and Aligning Task-Planning Safety in LLM-Based Embodied Agents
- 2026Agentic Microphysics: A Manifesto for Generative AI Safety
- 2025Agentic Moderation: Multi-Agent Design for Safer Vision-Language Models
- 2025AGENTSAFE: Benchmarking the Safety of Embodied Agents on Hazardous Instructions
- 2026Stop Drawing Scientific Claims from LLM Social Simulations Without Robustness Audits
- 2026QUACK: Questioning, Understanding, and Auditing Communicated Knowledge in Multimodal Social Deduction Agents