HomeGuard: VLM-based Embodied Safeguard for Identifying Contextual Risk in Household Task
On the map: Multimodal LLMs / vision-language models → Embodied and 3D vision-language models
Abstract (arXiv)
Vision-Language Models (VLMs) empower embodied agents to execute complex instructions, yet they remain vulnerable to contextual safety risks where benign commands become hazardous due to subtle environmental states. Existing safeguards often prove inadequate. Rule-based methods lack scalability in object-dense scenes, whereas model-based approaches relying on prompt engineering suffer from unfocused perception, resulting in missed risks or hallucinations. To address this, we propose an architecture-agnostic safeguard featuring Context-Guided Chain-of-Thought (CG-CoT). This mechanism decomposes risk assessment into active perception that sequentially anchors attention to interaction targets and relevant spatial neighborhoods, followed by semantic judgment based on this visual evidence. We support this approach with a curated grounding dataset and a two-stage training strategy utilizing Reinforcement Fine-Tuning (RFT) with process rewards to enforce precise intermediate grounding. Experiments demonstrate that our model HomeGuard significantly enhances safety, improving risk match rates by over 30% compared to base models while reducing oversafety. Beyond hazard detection, the generated visual anchors serve as actionable spatial constraints for downstream planners, facilitating explicit collision avoidance and safety trajectory generation. Code and data are released under https://github.com/AI45Lab/HomeGuard
Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Placed in Embodied and 3D vision-language models, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 54 of its 64 references that are in the map. First posted on arXiv 15 Mar 2026.
Builds on
54 of 64 references.
Closest ancestors · 10
Same direction, newest first
- 2026How Foundational Skills Influence VLM-based Embodied Agents:A Native Perspective24 Feb
- 2026Think3D: Thinking with Space for Spatial Reasoning19 Jan
- 2025Geometrically-Constrained Agent for Spatial Reasoning27 Nov
- 2025ERA: Transforming VLMs into Embodied Agents via Embodied Prior Learning and Online Reinforcement Learning14 Oct
- 2025HomeSafeBench: Benchmarking Embodied Vision-Language Models in Free-Exploration Home Safety Inspection28 Sep
- 2025AGENTSAFE: Benchmarking the Safety of Embodied Agents on Hazardous Instructions17 Jun
- 2025RoboRefer: Towards Spatial Referring with Reasoning in Vision-Language Models for Robotics4 Jun
- 2025World Modeling Makes a Better Planner: Dual Preference Optimization for Embodied Task Planning13 Mar
- 2023Octopus: Embodied Vision-Language Programmer from Environmental Feedback12 Oct
- 2023PaLM-E: An Embodied Multimodal Language Model6 Mar
Other references · 44
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,355
- 2025Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilitiescited by 3,655
- 2023Grounding DINO: Marrying DINO with Grounded Pre-Training for Open-Set Object Detectioncited by 3,274
- 2022Do As I Can, Not As I Say: Grounding Language in Robotic Affordancescited by 2,302
- 2019Generalized Intersection over Union: A Metric and A Loss for Bounding Box Regressioncited by 1,361
- 2025Qwen-Image Technical Reportcited by 973
- 2022ProgPrompt: Generating Situated Robot Task Plans using Large Language Modelscited by 598
- 2025Visual-RFT: Visual Reinforcement Fine-Tuningcited by 501
- 2022LLM-Planner: Few-Shot Grounded Planning for Embodied Agents with Large Language Modelscited by 459
- 2023Mitigating Hallucination in Large Multi-Modal Models via Robust Instruction Tuningcited by 439
- 2025AgentSpec: Customizable Runtime Enforcement for Safe and Reliable LLM Agentscited by 196
32 more
- 2023Dolphins: Multimodal Language Model for Drivingcited by 124
- 2023Instruct2Act: Mapping Multi-modality Instructions to Robotic Actions with Large Language Modelcited by 115
- 2025LlamaFirewall: An open source guardrail system for building secure AI agentscited by 114
- 2024GuardAgent: Safeguard LLM Agents by a Guard Agent via Knowledge-Enabled Reasoningcited by 113
- 2024SafeAgentBench: A Benchmark for Safe Task Planning of Embodied LLM Agentscited by 102
- 2020TAP: Text-Aware Pre-training for Text-VQA and Text-Captioncited by 95
- 2025Gemini Robotics 1.5: Pushing the Frontier of Generalist Robots with Advanced Embodied Reasoning, Thinking, and Motion Transfercited by 86
- 2025SafeVLA: Towards Safety Alignment of Vision-Language-Action Model via Constrained Learningcited by 69
- 2023Plug in the Safety Chip: Enforcing Constraints for LLM-driven Robot Agentscited by 67
- 2024Multimodal Situational Safetycited by 54
- 2024BadRobot: Jailbreaking Embodied LLM Agents in the Physical Worldcited by 40
- 2025IS-Bench: Evaluating Interactive Safety of VLM-Driven Embodied Agents in Daily Household Taskscited by 40
- 2024Cubify Anything: Scaling Indoor 3D Object Detectioncited by 39
- 2026RoboBrain 2.5: Depth in Sight, Time in Mindcited by 38
- 2025Generating Robot Constitutions & Benchmarks for Semantic Safetycited by 28
- 2025A Framework for Benchmarking and Aligning Task-Planning Safety in LLM-Based Embodied Agentscited by 27
- 2025ProbGuard: Proactive Runtime Monitoring for LLM Agent Safety via Probabilistic Predictioncited by 25
- 2024EARBench: Towards Evaluating Physical Risk Awareness for Task Planning of Foundation Model-based Embodied AI Agentscited by 24
- 2024RH20T-P: A Primitive-Level Robotic Dataset Towards Composable Generalization Agentscited by 20
- 2025WebGuard: Building a Generalizable Guardrail for Web Agentscited by 20
- 2024Hazards in Daily Life? Enabling Robots to Proactively Detect and Resolve Anomaliescited by 19
- 2025Subtle Risks, Critical Failures: A Framework for Diagnosing Physical Safety of LLMs for Embodied Decision Makingcited by 19
- 2024Easier Said Than Done: Unpacking Intent-Behavior Gap in Jailbreaking LLM-Based Robotscited by 14
- 2025RoboSafe: Safeguarding Embodied Agents via Executable Safety Logiccited by 11
- 2024Multi-Modal Grounded Planning and Efficient Replanning For Learning Embodied Agents with A Few Examplescited by 9
- 2025Towards Evaluating Proactive Risk Awareness of Multimodal Language Modelscited by 6
- 2025The Safety Challenge of World Models for Embodied AI Agents: A Reviewcited by 5
- 2026INFA-Guard: Mitigating Malicious Propagation via Infection-Aware Safeguarding in LLM-Based Multi-Agent Systemscited by 5
- 2026Grounding Generative Planners in Verifiable Logic: A Hybrid Architecture for Trustworthy Embodied AIcited by 4
- 2026Contextual Safety Reasoning and Grounding for Open-World Robotscited by 3
- 2025CEE: An Inference-Time Jailbreak Defense for Embodied Intelligence via Subspace Concept Rotationcited by 2
- 2026Vision and Language: Novel Representations and Artificial intelligence for Driving Scene Safety Assessment and Autonomous Vehicle Planningcited by 1
Built on by
Citing papers per year: 2026: 3.
3 papers.
Similar, not cited
Close in wording, no citation either way
- 2026HomeSafe-Bench: Evaluating Vision-Language Models on Unsafe Action Detection for Embodied Agents in Household Scenarios
- 2026SafeRelBench: A Spatial-Relation-Aware Benchmark for Process-Level Safety in VLM-Driven Embodied Agents
- 2026EgoSafetyBench: A Diagnostic Egocentric Video Benchmark for Evaluating Embodied VLMs as Runtime Safety Guards
- 2026GuardianBench: A Same-Scene Instruction-Contrastive Benchmark for Latent Contextual Risk in Embodied AI
- 2026HazardArena: Evaluating Semantic Safety in Vision-Language-Action Models
- 2026EMBGuard: Constructing Hazard-Aware Guardrails for Safe Planning in Embodied Agents
- 2026SAVeS: Steering Safety Judgments in Vision-Language Models via Semantic Cues
- 2026ForesightSafety-VLA: A Unified Diagnostic Safety Benchmark for Vision-Language-Action Models