mlsanityData to 14 Oct 2026

EU-Agent-Bench: Measuring Illegal Behavior of LLM Agents Under EU Law

arXiv 2510.21524 ↗First posted 24 Oct 2025cs.AIcited by 1

On the map: LLM agents and tool use → Social simulation and multi-agent debate

Abstract (arXiv)

Large language models (LLMs) are increasingly deployed as agents in various contexts by providing tools at their disposal. However, LLM agents can exhibit unpredictable behaviors, including taking undesirable and/or unsafe actions. In order to measure the latent propensity of LLM agents for taking illegal actions under an EU legislative context, we introduce EU-Agent-Bench, a verifiable human-curated benchmark that evaluates an agent's alignment with EU legal norms in situations where benign user inputs could lead to unlawful actions. Our benchmark spans scenarios across several categories, including data protection, bias/discrimination, and scientific integrity, with each user request allowing for both compliant and non-compliant execution of the requested actions. Comparing the model's function calls against a rubric exhaustively supported by citations of the relevant legislature, we evaluate the legal compliance of frontier LLMs, and furthermore investigate the compliance effect of providing the relevant legislative excerpts in the agent's system prompt along with explicit instructions to comply. We release a public preview set for the research community, while holding out a private test set to prevent data contamination in evaluating upcoming models. We encourage future work extending agentic safety benchmarks to different legal jurisdictions and to multi-turn and multilingual interactions. We release our code on hrefhttps://github.com/ilijalichkovski/eu-agent-benchthis URL.

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Social simulation and multi-agent debate, one of 16 directions in LLM agents and tool use. Builds on 21 of its 69 references that are in the map. First posted on arXiv 24 Oct 2025.

Builds on

21 of 69 references.

Closest ancestors · 1

Same direction, newest first

  1. 2025Ready Jurist One: Benchmarking Language Agents for Legal Intelligence in Dynamic Environments5 Jul

Other references · 20

  1. 2021A General Language Assistant as a Laboratory for Alignmentcited by 1,055
  2. 2023Prompt Injection attack against LLM-integrated Applicationscited by 605
  3. 2023Identifying the Risks of LM Agents with an LM-Emulated Sandboxcited by 548
  4. 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
  5. 2024AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agentscited by 437
  6. 2022ToxiGen: A Large-Scale Machine-Generated Dataset for Adversarial and Implicit Hate Speech Detectioncited by 422
  7. 2024Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agentscited by 369
  8. 2023LegalBench: A Collaboratively Built Benchmark for Measuring Legal Reasoning in Large Language Modelscited by 336
  9. 2024Agent-SafetyBench: Evaluating the Safety of LLM Agentscited by 306
  10. 2025Agentic Misalignment: How LLMs Could Be Insider Threatscited by 158
  11. 2024Adding Error Bars to Evals: A Statistical Approach to Language Model Evaluationscited by 148
  12. 2024AI Sandbagging: Language Models can Strategically Underperform on Evaluationscited by 145
8 more
  1. 2025Memory Injection Attacks on LLM Agents via Query-Only Interactioncited by 144
  2. 2023LawBench: Benchmarking Legal Knowledge of Large Language Modelscited by 117
  3. 2024SafeAgentBench: A Benchmark for Safe Task Planning of Embodied LLM Agentscited by 116
  4. 2024A Review of Prominent Paradigms for LLM-Based Agents: Tool Use (Including RAG), Planning, and Feedback Learningcited by 74
  5. 2025AgentMisalignment: Measuring the Propensity for Misaligned Behaviour in LLM-Based Agentscited by 22
  6. 2025RAS-Eval: A Comprehensive Benchmark for Security Evaluation of LLM Agents in Real-World Environmentscited by 17
  7. 2025Inherent and emergent liability issues in LLM-based agentic systems: a principal-agent perspectivecited by 13
  8. 2025SafeLawBench: Towards Safe Alignment of Large Language Modelscited by 9

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2026LLM Agents in Law: Taxonomy, Applications, and Challenges
  2. 2024LegalAgentBench: Evaluating LLM Agents in Legal Domain
  3. 2025Why Do Language Model Agents Whistleblow?
  4. 2026Policy-Invisible Violations in LLM-Based Agents
  5. 2026Agentic Evaluation of Copyright Law Compliance
  6. 2026AgentBoundary: Counterfactual Evaluation of Safety in Tool-Using LLM Agents
  7. 2025Efficient LLM Safety Evaluation through Multi-Agent Debate
  8. 2025When AIs Judge AIs: The Rise of Agent-as-a-Judge Evaluation for LLMs