mlsanityData to 14 Oct 2026

ForesightSafety-SAGE:A Fully Automated Scenario Generation and Safety Evaluation Framework for LLM Agents

arXiv 2606.08531 ↗First posted 7 Jun 2026cs.AIcited by 0

On the map: LLM agents and tool use → Agent threats, guardrails and governance

Abstract (arXiv)

Large language models (LLMs) are increasingly evolving from simple text-based interaction systems into LLM agents that can maintain memory, use tools, access external environments, and execute tasks. As their capabilities and autonomy expand, the safety risks they face also become more diverse. Existing evaluations often rely on manually written scenarios, static prompts, or final-output judgments, making it difficult to capture the diverse risks that agents may face during task execution. We introduce ForesightSafety-SAGE, a fully automated scenario generation and safety evaluation framework for LLM agents. Based on five risk dimensions,we instantiae abstract and diverse safety risks in real-world task execution into 1,072 measurable evaluation scenarios. Using the automated evaluation pipeline, 12 LLM agents are evaluated under two authority contexts. The results show that current agents still face substantial behavioral safety risks during task execution, with an average ASR of 47.1% and several models exceeding 70%. These findings demonstrate the importance of executable, process-level evaluation for understanding and improving LLM agent safety.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 21 of its 43 references that are in the map. First posted on arXiv 7 Jun 2026.

Builds on

21 of 43 references.

Closest ancestors · 7

Same direction, newest first

  1. 2026Towards Verifiably Safe Tool Use for LLM Agents12 Jan
  2. 2025SafeMind: Benchmarking and Mitigating Safety Risks in Embodied LLM Agents30 Sep
  3. 2025OS-Harm: A Benchmark for Measuring Safety of Computer Use Agents17 Jun
  4. 2024Agent-SafetyBench: Evaluating the Safety of LLM Agents19 Dec
  5. 2024AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents11 Oct
  6. 2024R-Judge: Benchmarking Safety Risk Awareness for LLM Agents18 Jan
  7. 2023Identifying the Risks of LM Agents with an LM-Emulated Sandbox25 Sep

Other references · 14

  1. 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
  2. 2023Toolformer: Language Models Can Teach Themselves to Use Toolscited by 4,182
  3. 2022Self-Instruct: Aligning Language Models with Self-Generated Instructionscited by 2,724
  4. 2023A Survey on Large Language Model based Autonomous Agentscited by 2,242
  5. 2023WebArena: A Realistic Web Environment for Building Autonomous Agentscited by 2,006
  6. 2023ToolLLM: Facilitating Large Language Models to Master 16000+ Real-world APIscited by 1,947
  7. 2021WebGPT: Browser-assisted question-answering with human feedbackcited by 1,745
  8. 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
  9. 2024τ-bench: A Benchmark for Tool-Agent-User Interaction in Real-World Domainscited by 1,402
  10. 2023Gorilla: Large Language Model Connected with Massive APIscited by 1,332
  11. 2023WizardLM: Empowering large pre-trained language models to follow complex instructionscited by 1,125
  12. 2022Red Teaming Language Models with Language Modelscited by 1,026
2 more
  1. 2024Learning to Ask: When LLM Agents Meet Unclear Instructioncited by 42
  2. 2025SafeToolBench: Pioneering a Prospective Benchmark to Evaluating Tool Utilization Safety in LLMscited by 22

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026Risky-Bench: Probing Agentic Safety Risks under Real-World Deployment
  2. 2025LM Agents May Fail to Act on Their Own Risk Knowledge
  3. 2025SafetyFlow: An Agent-Flow System for Automated LLM Safety Benchmarking
  4. 2026AgentBoundary: Counterfactual Evaluation of Safety in Tool-Using LLM Agents
  5. 2026AURA-Eval: Evaluation Framework for Acting Under Risk Awareness in LLM Agent Trajectories
  6. 2025Measuring What Matters: A Framework for Evaluating Safety Risks in Real-World LLM Applications
  7. 2025Beyond Reactive Safety: Risk-Aware LLM Alignment via Long-Horizon Simulation
  8. 2025ManagerBench: Evaluating the Safety-Pragmatism Trade-off in Autonomous LLMs