mlsanityData to 7 Oct 2026

Are Your Agents Upward Deceivers?

arXiv 2512.04864 ↗First posted 4 Dec 2025cs.AIcited by 11

On the map: LLM agents and tool use → Social simulation and multi-agent debate

Abstract (arXiv)

Large Language Model (LLM)-based agents are increasingly used as autonomous subordinates that carry out tasks for users. This raises the question of whether they may also engage in deception, similar to how individuals in human organizations lie to superiors to create a good image or avoid punishment. We observe and define agentic upward deception, a phenomenon in which an agent facing environmental constraints conceals its failure and performs actions that were not requested without reporting. To assess its prevalence, we construct a benchmark of 200 tasks covering five task types and eight realistic scenarios in a constrained environment, such as broken tools or mismatched information sources. Evaluations of 11 popular LLMs reveal that these agents typically exhibit action-based deceptive behaviors, such as guessing results, performing unsupported simulations, substituting unavailable information sources, and fabricating local files. We further test prompt-based mitigation and find only limited reductions, suggesting that it is difficult to eliminate and highlighting the need for stronger mitigation strategies to ensure the safety of LLM-based agents.

Key facts. Cited by 11 papers in the map (data through 7 Oct 2026). Placed in Social simulation and multi-agent debate, one of 16 directions in LLM agents and tool use. Builds on 33 of its 50 references that are in the map. First posted on arXiv 4 Dec 2025.

Builds on

33 of 50 references.

References · 33

  1. 2023GPT-4 Technical Reportcited by 18,132
  2. 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 8,851
  3. 2025Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilitiescited by 3,655
  4. 2023SWE-bench: Can Language Models Resolve Real-World GitHub Issues?cited by 3,193
  5. 2023Voyager: An Open-Ended Embodied Agent with Large Language Modelscited by 2,081
  6. 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
  7. 2024A Survey on LLM-as-a-Judgecited by 1,384
  8. 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,330
  9. 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,326
  10. 2025AlphaEvolve: A coding agent for scientific and algorithmic discoverycited by 763
  11. 2024AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Basescited by 402
  12. 2023Multi-step Jailbreaking Privacy Attacks on ChatGPTcited by 320
21 more
  1. 2024Agent-SafetyBench: Evaluating the Safety of LLM Agentscited by 280
  2. 2024SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Modelscited by 225
  3. 2024Jailbreak Attacks and Defenses Against Large Language Models: A Surveycited by 215
  4. 2025Agentic Misalignment: How LLMs Could Be Insider Threatscited by 136
  5. 2025Natural Emergent Misalignment from Reward Hacking in Production RLcited by 111
  6. 2024BadAgent: Inserting and Activating Backdoor Attacks in LLM Agentscited by 106
  7. 2025OS-Harm: A Benchmark for Measuring Safety of Computer Use Agentscited by 104
  8. 2024GUI Agents: A Surveycited by 101
  9. 2023Deception Abilities Emerged in Large Language Modelscited by 99
  10. 2025SafeArena: Evaluating the Safety of Autonomous Web Agentscited by 97
  11. 2024Planning, Creation, Usage: Benchmarking LLMs for Comprehensive Tool Utilization in Real-World Complex Scenarioscited by 85
  12. 2024VLSBench: Unveiling Visual Leakage in Multimodal Safetycited by 59
  13. 2025Your Agent May Misevolve: Emergent Risks in Self-evolving LLM Agentscited by 52
  14. 2025ImpossibleBench: Measuring LLMs' Propensity of Exploiting Test Casescited by 51
  15. 2025MCPSecBench: A Systematic Security Benchmark and Playground for Testing Model Context Protocolscited by 47
  16. 2025VPI-Bench: Visual Prompt Injection Attacks for Computer-Use Agentscited by 42
  17. 2025A Comprehensive Survey on Trustworthiness in Reasoning with Large Language Modelscited by 22
  18. 2025SafeToolBench: Pioneering a Prospective Benchmark to Evaluating Tool Utilization Safety in LLMscited by 21
  19. 2025Mathematical Proof as a Litmus Test: Revealing Failure Modes of Advanced Large Reasoning Modelscited by 18
  20. 2025DeceptionBench: A Comprehensive Benchmark for AI Deception Behaviors in Real-world Scenarioscited by 14
  21. 2025LLMs Deceive Unintentionally: Emergent Misalignment in Dishonesty from Misaligned Samples to Biased Human-AI Interactionscited by 7

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 11.

11 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026DecepEval: A Benchmark for Evaluating Deception in LLM Agents
  2. 2026SPADE-Bench: Evaluating Spontaneous Strategic Deception in Agents via Plan-Action Divergence
  3. 2026Deception and Communication in Autonomous Multi-Agent Systems: An Experimental Study with Among Us
  4. 2025Beyond Prompt-Induced Lies: Investigating LLM Deception on Benign Prompts
  5. 2025Among Us: A Sandbox for Measuring and Detecting Agentic Deception
  6. 2026Intentional Deception as Controllable Capability in LLM Agents
  7. 2026DeceptGuard :A Constitutional Oversight Framework For Detecting Deception in LLM Agents
  8. 2026Hidden in Plain Text: Measuring LLM Deception Quality Against Human Baselines Using Social Deduction Games