Internal Representations as Indicators of Hallucinations in Agent Tool Selection
On the map: LLM agents and tool use → Medical and scientific domain agents
Abstract (arXiv)
Large Language Models (LLMs) have shown remarkable capabilities in tool calling and tool usage, but suffer from hallucinations where they choose incorrect tools, provide malformed parameters and exhibit 'tool bypass' behavior by performing simulations and generating outputs instead of invoking specialized tools or external systems. This undermines the reliability of LLM based agents in production systems as it leads to inconsistent results, and bypasses security and audit controls. Such hallucinations in agent tool selection require early detection and error handling. Unlike existing hallucination detection methods that require multiple forward passes or external validation, we present a computationally efficient framework that detects tool-calling hallucinations in real-time by leveraging LLMs' internal representations during the same forward pass used for generation. We evaluate this approach on reasoning tasks across multiple domains, demonstrating strong detection performance (up to 86.4% accuracy) while maintaining real-time inference capabilities with minimal computational overhead, particularly excelling at detecting parameter-level hallucinations and inappropriate tool selections, critical for reliable agent deployment.
Key facts. Cited by 18 papers in the map (data through 7 Oct 2026). Placed in Medical and scientific domain agents, one of 16 directions in LLM agents and tool use. Builds on 15 of its 32 references that are in the map. First posted on arXiv 8 Jan 2026.
Builds on
15 of 32 references.
References · 15
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,355
- 2023Toolformer: Language Models Can Teach Themselves to Use Toolscited by 4,072
- 2022Language Models (Mostly) Know What They Knowcited by 1,783
- 2023The Rise and Potential of Large Language Model Based Agents: A Surveycited by 1,422
- 2023Inference-Time Intervention: Eliciting Truthful Answers from a Language Modelcited by 1,259
- 2022Interpretability in the Wild: a Circuit for Indirect Object Identification in GPT-2 smallcited by 1,130
- 2020On Faithfulness and Factuality in Abstractive Summarizationcited by 895
- 2023The Internal State of an LLM Knows When It's Lyingcited by 644
- 2023ToolAlpaca: Generalized Tool Learning for Language Models with 3000 Simulated Casescited by 383
- 2023An Overview of Catastrophic AI Riskscited by 214
- 2021Alignment of Language Agentscited by 167
Built on by
Citing papers per year: 2026: 18.
18 papers.
Sort:
By area:
- 2026Tool Calling is Linearly Readable and Steerable in Language Modelscited by 9
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gapcited by 6
- 2026Exploring Agentic Tool-Calling Decisions via Uncertainty-Aligned Reinforcement Learningcited by 4
- 2026Beyond the Black Box: Interpretability of Agentic AI Tool Usecited by 3
- 2026Functional Entropy: Predicting Functional Correctness in LLM-Generated Code with Uncertainty Quantificationcited by 3
- 2026Your Agentic LLMs Secretly Encode Indirect Prompt-Injection Exposure in Hidden Statescited by 3
- 2026Spectral Guardrails for Agents in the Wild: Detecting Tool Use Hallucinations via Attention Topologycited by 2
- 2026Tool-Call Dependency Structure is Linearly Decodable in LLM Agent Residual Streamscited by 1
- 2026A Few Neurons Reveal When LLMs Misuse Tools: Sparse Detection and Selective Steering for Reliable Tool Usecited by 1
- 2026Actionable Hallucination Detection: Translating Latent Uncertainty into Agentic Critiquecited by 1
- 2026How to Speculate about Uncertainty in Agentic Coding? A Draft-Model Gate Methodcited by 1
- 2026Getting the Parameters Right: A Difficulty-Graded Benchmark and Probe-Guided Training for LLM Tool Callscited by 0
6 more
- 2026Search-G1: Grounded Search Agents via Representation-Based Intrinsic Rewardscited by 0
- 2026Invocation-Level Reliability of Tool-Using Agentscited by 0
- 2026The Calls are Coming from Inside the Model: Investigating Probe-based Detection of Tool-Calling Errors in LLMscited by 0
- 2026Uncertainty Quantification for LLM Agents: A Taxonomy, an Evaluation Protocol, and an Empirical Studycited by 0
- 2026Do Agents Know When They Succeed? Calibrating Agent Confidence from Internal Representationscited by 0
- 2026When Does Correction Become Repair? Mechanistic Auditing of Internal Interventions in Tool-Using LLMscited by 0
- 2026When Does Correction Become Repair? Mechanistic Auditing of Internal Interventions in Tool-Using LLMs28 Sep 2026
- 2026Do Agents Know When They Succeed? Calibrating Agent Confidence from Internal Representations8 Sep 2026
- 2026Uncertainty Quantification for LLM Agents: A Taxonomy, an Evaluation Protocol, and an Empirical Study7 Sep 2026
- 2026How to Speculate about Uncertainty in Agentic Coding? A Draft-Model Gate Method4 Sep 2026
- 2026The Calls are Coming from Inside the Model: Investigating Probe-based Detection of Tool-Calling Errors in LLMs27 Aug 2026
- 2026Invocation-Level Reliability of Tool-Using Agents23 Aug 2026
- 2026Actionable Hallucination Detection: Translating Latent Uncertainty into Agentic Critique11 Aug 2026
- 2026Getting the Parameters Right: A Difficulty-Graded Benchmark and Probe-Guided Training for LLM Tool Calls4 Aug 2026
- 2026Your Agentic LLMs Secretly Encode Indirect Prompt-Injection Exposure in Hidden States1 Aug 2026
- 2026A Few Neurons Reveal When LLMs Misuse Tools: Sparse Detection and Selective Steering for Reliable Tool Use31 Jul 2026
- 2026Search-G1: Grounded Search Agents via Representation-Based Intrinsic Rewards24 Jul 2026
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gap29 Jun 2026
6 more
- 2026Exploring Agentic Tool-Calling Decisions via Uncertainty-Aligned Reinforcement Learning5 Jun 2026
- 2026Functional Entropy: Predicting Functional Correctness in LLM-Generated Code with Uncertainty Quantification27 May 2026
- 2026Tool-Call Dependency Structure is Linearly Decodable in LLM Agent Residual Streams25 May 2026
- 2026Tool Calling is Linearly Readable and Steerable in Language Models8 May 2026
- 2026Beyond the Black Box: Interpretability of Agentic AI Tool Use7 May 2026
- 2026Spectral Guardrails for Agents in the Wild: Detecting Tool Use Hallucinations via Attention Topology8 Feb 2026
- 2026Tool Calling is Linearly Readable and Steerable in Language Modelscited by 9
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gapcited by 6
- 2026Exploring Agentic Tool-Calling Decisions via Uncertainty-Aligned Reinforcement Learningcited by 4
- 2026Beyond the Black Box: Interpretability of Agentic AI Tool Usecited by 3
- 2026Your Agentic LLMs Secretly Encode Indirect Prompt-Injection Exposure in Hidden Statescited by 3
- 2026Tool-Call Dependency Structure is Linearly Decodable in LLM Agent Residual Streamscited by 1
- 2026A Few Neurons Reveal When LLMs Misuse Tools: Sparse Detection and Selective Steering for Reliable Tool Usecited by 1
- 2026Actionable Hallucination Detection: Translating Latent Uncertainty into Agentic Critiquecited by 1
- 2026How to Speculate about Uncertainty in Agentic Coding? A Draft-Model Gate Methodcited by 1
- 2026Getting the Parameters Right: A Difficulty-Graded Benchmark and Probe-Guided Training for LLM Tool Callscited by 0
- 2026Search-G1: Grounded Search Agents via Representation-Based Intrinsic Rewardscited by 0
- 2026The Calls are Coming from Inside the Model: Investigating Probe-based Detection of Tool-Calling Errors in LLMscited by 0
12 most cited of 15 All 15 (JSON)
- 2026When Does Correction Become Repair? Mechanistic Auditing of Internal Interventions in Tool-Using LLMs28 Sep 2026
- 2026Do Agents Know When They Succeed? Calibrating Agent Confidence from Internal Representations8 Sep 2026
- 2026Uncertainty Quantification for LLM Agents: A Taxonomy, an Evaluation Protocol, and an Empirical Study7 Sep 2026
- 2026How to Speculate about Uncertainty in Agentic Coding? A Draft-Model Gate Method4 Sep 2026
- 2026The Calls are Coming from Inside the Model: Investigating Probe-based Detection of Tool-Calling Errors in LLMs27 Aug 2026
- 2026Actionable Hallucination Detection: Translating Latent Uncertainty into Agentic Critique11 Aug 2026
- 2026Getting the Parameters Right: A Difficulty-Graded Benchmark and Probe-Guided Training for LLM Tool Calls4 Aug 2026
- 2026Your Agentic LLMs Secretly Encode Indirect Prompt-Injection Exposure in Hidden States1 Aug 2026
- 2026A Few Neurons Reveal When LLMs Misuse Tools: Sparse Detection and Selective Steering for Reliable Tool Use31 Jul 2026
- 2026Search-G1: Grounded Search Agents via Representation-Based Intrinsic Rewards24 Jul 2026
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gap29 Jun 2026
- 2026Exploring Agentic Tool-Calling Decisions via Uncertainty-Aligned Reinforcement Learning5 Jun 2026
12 newest of 15 All 15 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2026Closed-World Resolution Against Tool Hallucination in LLM Agents
- 2026Understanding and Mitigating Hallucination Escape in Tool-Using LLM Agents
- 2026Beyond Final Answers: Auditing Trajectory-Level Hallucinations in Multi-Agent Industrial Workflows
- 2026Tool Receipts, Not Zero-Knowledge Proofs: Practical Hallucination Detection for AI Agents
- 2025MIRAGE-Bench: LLM Agent is Hallucinating and Where to Find Them
- 2025LLM-based Agents Suffer from Hallucinations: A Survey of Taxonomy, Methods, and Directions
- 2026AgentHallu: Benchmarking Automated Hallucination Attribution of LLM-based Agents
- 2026Hallucination Cascade: Analyzing Error Propagation in Multi-Agent LLM Systems