mlsanityData to 14 Oct 2026

The Shadow Self: Intrinsic Value Misalignment in Large Language Model Agents

arXiv 2601.17344 ↗First posted 24 Jan 2026cs.CLcited by 1

On the map: LLM agents and tool use → General LLM agent frameworks and benchmarks

also in 1 more
Abstract (arXiv)

Large language model (LLM) agents with extended autonomy unlock new capabilities, but also introduce heightened challenges for LLM safety. In particular, an LLM agent may pursue objectives that deviate from human values and ethical norms, a risk known as value misalignment. Existing evaluations primarily focus on responses to explicit harmful input or robustness against system failure, while value misalignment in realistic, fully benign, and agentic settings remains largely underexplored. To fill this gap, we first formalize the Loss-of-Control risk and identify the previously underexamined Intrinsic Value Misalignment (Intrinsic VM). We then introduce IMPRESS (Intrinsic Value Misalignment Probes in REalistic Scenario Set), a scenario-driven framework for systematically assessing this risk. Following our framework, we construct benchmarks composed of realistic, fully benign, and contextualized scenarios, using a multi-stage LLM generation pipeline with rigorous quality control. We evaluate Intrinsic VM on 21 state-of-the-art LLM agents and find that it is a common and broadly observed safety risk across models. Moreover, the misalignment rates vary by motives, risk types, model scales, and architectures. While decoding strategies and hyperparameters exhibit only marginal influence, contextualization and framing mechanisms significantly shape misalignment behaviors. Finally, we conduct human verification to validate our automated judgments and assess existing mitigation strategies, such as safety prompting and guardrails, which show instability or limited effectiveness. We further demonstrate key use cases of IMPRESS across the AI Ecosystem. Our code and benchmark will be publicly released upon acceptance.

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in General LLM agent frameworks and benchmarks, one of 16 directions in LLM agents and tool use. Builds on 43 of its 69 references that are in the map. First posted on arXiv 24 Jan 2026.

Builds on

43 of 69 references.

Closest ancestors · 2

Same direction, newest first

  1. 2025AgentMisalignment: Measuring the Propensity for Misaligned Behaviour in LLM-Based Agents4 Jun
  2. 2024Exploring Large Language Model based Intelligent Agents: Definitions, Methods, and Prospects7 Jan

Other references · 41

  1. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
  2. 2023Generative Agents: Interactive Simulacra of Human Behaviorcited by 3,568
  3. 2023Lost in the Middle: How Language Models Use Long Contextscited by 3,455
  4. 2023A Survey on Hallucination in Large Language Models: Principles, Taxonomy, Challenges, and Open Questionscited by 1,601
  5. 2024A Survey on LLM-as-a-Judgecited by 1,423
  6. 2023LongBench: A Bilingual, Multitask Benchmark for Long Context Understandingcited by 1,417
  7. 2023HuggingGPT: Solving AI Tasks with ChatGPT and its Friends in Hugging Facecited by 1,190
  8. 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 860
  9. 2023Identifying the Risks of LM Agents with an LM-Emulated Sandboxcited by 548
  10. 2024InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agentscited by 538
  11. 2023Catastrophic Jailbreak of Open-source LLMs via Exploiting Generationcited by 451
  12. 2024AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agentscited by 437
29 more
  1. 2024AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Basescited by 429
  2. 2023Toxicity in ChatGPT: Analyzing Persona-assigned Language Modelscited by 360
  3. 2024Agent-SafetyBench: Evaluating the Safety of LLM Agentscited by 306
  4. 2024R-Judge: Benchmarking Safety Risk Awareness for LLM Agentscited by 288
  5. 2024PrivacyLens: Evaluating Privacy Norm Awareness of Language Models in Actioncited by 171
  6. 2025Agentic Misalignment: How LLMs Could Be Insider Threatscited by 158
  7. 2025Where LLM Agents Fail and How They can Learn From Failurescited by 133
  8. 2021Goal Misgeneralization in Deep Reinforcement Learningcited by 123
  9. 2025A Survey on Trustworthy LLM Agents: Threats and Countermeasurescited by 96
  10. 2025Persona Features Control Emergent Misalignmentcited by 86
  11. 2026Emergent Introspective Awareness in Large Language Modelscited by 82
  12. 2024Breaking Agents: Compromising Autonomous LLM Agents Through Malfunction Amplificationcited by 81
  13. 2024Intention Analysis Makes LLMs A Good Jailbreak Defendercited by 74
  14. 2025Convergent Linear Representations of Emergent Misalignmentcited by 71
  15. 2025LLM-based Agents Suffer from Hallucinations: A Survey of Taxonomy, Methods, and Directionscited by 50
  16. 2024Emulated Disalignment: Safety Alignment for Large Language Models May Backfire!cited by 37
  17. 2023Robust Safety Classifier for Large Language Models: Adversarial Prompt Shieldcited by 25
  18. 2025Population-Aligned Persona Generation for LLM-based Social Simulationcited by 21
  19. 2025QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Languagecited by 18
  20. 2024You Know What I'm Saying: Jailbreak Attack via Implicit Referencecited by 14
  21. 2024Exploring Backdoor Vulnerabilities of Chat Modelscited by 13
  22. 2025Demystifying the Lifecycle of Failures in Platform-Orchestrated Agentic Workflowscited by 10
  23. 2025How Personality Traits Shape LLM Risk-Taking Behaviourcited by 9
  24. 2025Unintended Misalignment from Agentic Fine-Tuning: Risks and Mitigationcited by 9
  25. 2024Stochastic Monkeys at Play: Random Augmentations Cheaply Break LLM Safety Alignmentcited by 5
  26. 2025Will artificial agents pursue power by default?cited by 4
  27. 2025Empirical Evidence for Alignment Faking in a Small LLM and Prompt-Based Mitigation Techniquescited by 4
  28. 2025Eliciting and Analyzing Emergent Misalignment in State-of-the-Art Large Language Modelscited by 4
  29. 2025Evaluating Chinese Large Language Models: The Influence of Persona Assignment on Stereotypes and Safeguardscited by 2

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2024ALI-Agent: Assessing LLMs' Alignment with Human Values via Agent-based Evaluation
  2. 2026The Causal Impact of Tool Affordance on Safety Alignment in LLM Agents
  3. 2026Delegated Misalignment: How Multi-Agent Structures Amplify LLM Safety Risks
  4. 2024Large Language Model Safety: A Holistic Survey
  5. 2025Beyond Reactive Safety: Risk-Aware LLM Alignment via Long-Horizon Simulation
  6. 2026Beyond the Leaderboard: A Synthesis of Tool-Use, Planning, and Reasoning Failures in Large Language Model Agents
  7. 2025AgentAlign: Navigating Safety Alignment in the Shift from Informative to Agentic Large Language Models
  8. 2025Multi-level Value Alignment in Agentic AI Systems: Survey and Perspectives