From Helpfulness to Toxic Proactivity: Diagnosing Behavioral Misalignment in LLM Agents
On the map: LLM agents and tool use → General LLM agent frameworks and benchmarks
also in 1 more
Abstract (arXiv)
The enhanced capabilities of LLM-based agents come with an emergency for model planning and tool-use abilities. Attributing to helpful-harmless trade-off from LLM alignment, agents typically also inherit the flaw of "over-refusal", which is a passive failure mode. However, the proactive planning and action capabilities of agents introduce another crucial danger on the other side of the trade-off. This phenomenon we term "Toxic Proactivity'': an active failure mode in which an agent, driven by the optimization for Machiavellian helpfulness, disregards ethical constraints to maximize utility. Unlike over-refusal, Toxic Proactivity manifests as the agent taking excessive or manipulative measures to ensure its "usefulness'' is maintained. Existing research pays little attention to identifying this behavior, as it often lacks the subtle context required for such strategies to unfold. To reveal this risk, we introduce a novel evaluation framework based on dilemma-driven interactions between dual models, enabling the simulation and analysis of agent behavior over multi-step behavioral trajectories. Through extensive experiments with mainstream LLMs, we demonstrate that Toxic Proactivity is a widespread behavioral phenomenon and reveal two major tendencies. We further present a systematic benchmark for evaluating Toxic Proactive behavior across contextual settings.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in General LLM agent frameworks and benchmarks, one of 16 directions in LLM agents and tool use. Builds on 52 of its 59 references that are in the map. First posted on arXiv 4 Feb 2026.
Builds on
52 of 59 references.
Closest ancestors · 5
Same direction, newest first
- 2025LLM-based Agentic Reasoning Frameworks: A Survey from Methods to Scenarios25 Aug
- 2025RepliBench: Evaluating the Autonomous Replication Capabilities of Language Model Agents21 Apr
- 2025Large Language Model Agent: A Survey on Methodology, Applications and Challenges27 Mar
- 2023The Rise and Potential of Large Language Model Based Agents: A Survey14 Sep
- 2023A Survey on Large Language Model based Autonomous Agents22 Aug
Other references · 47
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2025Qwen3 Technical Reportcited by 8,195
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2024GPT-4o System Cardcited by 4,467
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 2,950
- 2023WebArena: A Realistic Web Environment for Building Autonomous Agentscited by 1,908
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,330
- 2022Scaling Laws for Reward Model Overoptimizationcited by 1,056
- 2023Towards Understanding Sycophancy in Language Modelscited by 988
- 2024OpenHands: An Open Platform for AI Software Developers as Generalist Agentscited by 956
- 2022Discovering Language Model Behaviors with Model-Written Evaluationscited by 805
35 more
- 2025DeepSeek-V3.2: Pushing the Frontier of Open Large Language Modelscited by 755
- 2023Identifying the Risks of LM Agents with an LM-Emulated Sandboxcited by 514
- 2024JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Modelscited by 494
- 2024Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Trainingcited by 478
- 2024InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agentscited by 476
- 2024Safety Alignment Should Be Made More Than Just a Few Tokens Deepcited by 450
- 2024AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agentscited by 406
- 2025Monitoring Reasoning Models for Misbehavior and the Risks of Promoting Obfuscationcited by 338
- 2024Improving Alignment and Robustness with Circuit Breakerscited by 302
- 2024Agent-SafetyBench: Evaluating the Safety of LLM Agentscited by 280
- 2024R-Judge: Benchmarking Safety Risk Awareness for LLM Agentscited by 268
- 2024Frontier Models are Capable of In-context Schemingcited by 252
- 2019Risks from Learned Optimization in Advanced Machine Learning Systemscited by 250
- 2023Reward Model Ensembles Help Mitigate Overoptimizationcited by 225
- 2023SafetyBench: Evaluating the Safety of Large Language Modelscited by 189
- 2023AI Deception: A Survey of Examples, Risks, and Potential Solutionscited by 185
- 2023Do the Rewards Justify the Means? Measuring Trade-Offs Between Rewards and Ethical Behavior in the MACHIAVELLI Benchmarkcited by 174
- 2025Emergent Misalignment: Narrow finetuning can produce broadly misaligned LLMscited by 158
- 2023Large Language Models can Strategically Deceive their Users when Put Under Pressurecited by 132
- 2024AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agentscited by 129
- 2024Language Models Learn to Mislead Humans via RLHFcited by 118
- 2019Optimal Policies Tend to Seek Powercited by 115
- 2023Evil Geniuses: Delving into the Safety of LLM-based Agentscited by 103
- 2025OpenAgentSafety: A Comprehensive Framework for Evaluating Real-World AI Agent Safetycited by 71
- 2025Superintelligent Agents Pose Catastrophic Risks: Can Scientist AI Offer a Safer Path?cited by 70
- 2024SG-Bench: Evaluating LLM Safety Generalization Across Diverse Tasks and Prompt Typescited by 58
- 2024On Targeted Manipulation and Deception when Optimizing LLMs for User Feedbackcited by 45
- 2024Tradeoffs Between Alignment and Helpfulness in Language Models with Steering Methodscited by 26
- 2025Nuclear Deployed: Analyzing Catastrophic Risks in Decision-making of Autonomous LLM Agentscited by 23
- 2025PropensityBench: Evaluating Latent Safety Risks in Large Language Models via an Agentic Approachcited by 19
- 2025Frontier AI Risk Management Framework in Practice: A Risk Analysis Technical Reportcited by 8
- 2025Adaptive Helpfulness-Harmlessness Alignment with Preference Vectorscited by 6
- 2025Dive into the Agent Matrix: A Realistic Evaluation of Self-Replication Risk in LLM Agentscited by 5
- 2026Agents at Risk: How Users Unwittingly Undermine LLM Safetycited by 3
- 2025Can LLMs Threaten Human Survival? Benchmarking Potential Existential Threats from LLMs via Prefix Completioncited by 1
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2025Beyond Reactivity: Measuring Proactive Problem Solving in LLM Agents
- 2026Foundations of Proactive Agents: Principles, Technical Layers, and Proactivity-Gym
- 2025AgentMisalignment: Measuring the Propensity for Misaligned Behaviour in LLM-Based Agents
- 2026Instrumental Choices: Measuring the Propensity of LLM Agents to Pursue Instrumental Behaviors
- 2026SchemeArena: Factorized Stress Testing of Scheming in LLM Agents
- 2026Set-shifting Behavioral Test for Harnessed Agents
- 2026The Causal Impact of Tool Affordance on Safety Alignment in LLM Agents
- 2026Evaluation of Multi-Turn Consistency in LLM Agents: Survival Analysis and Failure-Rationale Taxonomy