RT-SHCUA: Real-Time Self-Hosted Computer-Use Agent for UAV Control
On the map: LLM agents and tool use → Multimodal and embodied agents
Abstract (arXiv)
Natural-language control offers a promising interface for unmanned aerial vehicles (UAVs), but directly applying self-hosted computer-use agents (SHCUAs) to UAV control introduces a structural mismatch. SHCUAs are designed for interactive host-side tool use, where delayed agent iterations are often acceptable. UAV control, however, is coupled with continuously changing physical states, strict timing constraints, safety risks, and security accountability. A stale, unauthorized, or tampered agent decision may therefore lead to unsafe or untraceable vehicle behavior. This paper proposes a real-time and security-oriented restructuring of SHCUA-based UAV control. Instead of allowing an SHCUA to directly issue flight commands, we transform its outputs into contract-bound UAV skill invocations with explicit timing, state, authority, fallback, and evidence semantics. Based on this abstraction, we design an architecture that separates semantic reasoning from onboard execution and security/safety enforcement. Slow cloud or edge reasoning is used for mission understanding, while onboard components validate and dispatch only timely, authorized, and state-consistent skills. Security-critical enforcement points can be protected by TEE-style or microcontroller isolation mechanisms without moving the full language agent or high-frequency flight-control loop into trusted components. Prototype evaluation shows that RT-SHCUA maintains bounded task-level responsiveness while supporting degraded handling, trusted admission, and auditable evidence preservation for SHCUA-mediated UAV actions.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Multimodal and embodied agents, one of 16 directions in LLM agents and tool use. Builds on 74 of its 79 references that are in the map. First posted on arXiv 20 Jul 2026.
Builds on
74 of 79 references.
Closest ancestors · 5
Same direction, newest first
- 2026AerialClaw: An Open-Source Framework for LLM-Driven Autonomous Aerial Agents10 Jun
- 2026An LLM-Agnostic, MAVLink-Based Drone Command and Control Interface and Agentic Harness Using the Model Context Protocol21 Jan
- 2025Taking Flight with Dialogue: Enabling Natural Language Control for PX4-based Drone Agent9 Jun
- 2025UAVs Meet LLMs: Overviews and Perspectives Toward Agentic Low-Altitude Mobility4 Jan
- 2022LLM-Planner: Few-Shot Grounded Planning for Embodied Agents with Large Language Models8 Dec
Other references · 69
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,355
- 2023Toolformer: Language Models Can Teach Themselves to Use Toolscited by 4,072
- 2023RT-2: Vision-Language-Action Models Transfer Web Knowledge to Robotic Controlcited by 2,993
- 2024OpenVLA: An Open-Source Vision-Language-Action Modelcited by 2,777
- 2022Do As I Can, Not As I Say: Grounding Language in Robotic Affordancescited by 2,302
- 2023A Survey on Large Language Model based Autonomous Agentscited by 2,203
- 2023Voyager: An Open-Ended Embodied Agent with Large Language Modelscited by 2,081
- 2023PaLM-E: An Embodied Multimodal Language Modelcited by 2,037
- 2023WebArena: A Realistic Web Environment for Building Autonomous Agentscited by 1,908
- 2023ToolLLM: Facilitating Large Language Models to Master 16000+ Real-world APIscited by 1,880
- 2023The Rise and Potential of Large Language Model Based Agents: A Surveycited by 1,422
- 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,339
38 more
- 2023Gorilla: Large Language Model Connected with Massive APIscited by 1,302
- 2024τ-bench: A Benchmark for Tool-Agent-User Interaction in Real-World Domainscited by 1,280
- 2023Mind2Web: Towards a Generalist Agent for the Webcited by 1,210
- 2023HuggingGPT: Solving AI Tasks with ChatGPT and its Friends in Hugging Facecited by 1,173
- 2022Code as Policies: Language Model Programs for Embodied Controlcited by 1,172
- 2024OSWorld: Benchmarking Multimodal Agents for Open-Ended Tasks in Real Computer Environmentscited by 1,134
- 2022Inner Monologue: Embodied Reasoning through Planning with Language Modelscited by 1,057
- 2023VoxPoser: Composable 3D Value Maps for Robotic Manipulation with Language Modelscited by 733
- 2022ProgPrompt: Generating Situated Robot Task Plans using Large Language Modelscited by 598
- 2023Prompt Injection attack against LLM-integrated Applicationscited by 568
- 2023Identifying the Risks of LM Agents with an LM-Emulated Sandboxcited by 514
- 2024InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agentscited by 476
- 2024AndroidWorld: A Dynamic Benchmarking Environment for Autonomous Agentscited by 450
- 2024WebVoyager: Building an End-to-End Web Agent with Large Multimodal Modelscited by 424
- 2024WorkArena: How Capable Are Web Agents at Solving Common Knowledge Work Tasks?cited by 348
- 2023ChatGPT for Robotics: Design Principles and Model Abilitiescited by 296
- 2024Mobile-Agent: Autonomous Multi-Modal Mobile Device Agent with Visual Perceptioncited by 283
- 2023EmbodiedGPT: Vision-Language Pre-Training via Embodied Chain of Thoughtcited by 276
- 2024Tool Learning with Large Language Models: A Surveycited by 221
- 2024Windows Agent Arena: Evaluating Multi-Modal OS Agents at Scalecited by 212
- 2023TaskMatrix.AI: Completing Tasks by Connecting Foundation Models with Millions of APIscited by 184
- 2024The BrowserGym Ecosystem for Web Agent Researchcited by 152
- 2024AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathwayscited by 122
- 2024The Task Shield: Enforcing Task Alignment to Defend Against Indirect Prompt Injection in LLM Agentscited by 89
- 2024Manipulate-Anything: Automating Real-World Robots using Vision-Language Modelscited by 82
- 2024WorkArena++: Towards Compositional Planning and Reasoning-based Common Knowledge Work Taskscited by 81
- 2025A-MemGuard: A Proactive Defense Framework for LLM-Based Agent Memorycited by 61
- 2026Zombie Agents: Persistent Control of Self-Evolving LLM Agents via Self-Reinforcing Injectionscited by 44
- 2025OS Agents: A Survey on MLLM-based Agents for General Computing Devices Usecited by 35
- 2026Don't Let the Claw Grip Your Hand: A Security Analysis and Defense Framework for OpenClawcited by 26
- 2021Run Time Assurance for Safety-Critical Systems: An Introduction to Safety Filtering Approaches for Complex Control Systemscited by 25
- 2023TypeFly: Flying Drones with Large Language Modelcited by 23
- 2025A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?cited by 23
- 2026Uncovering Security Threats and Architecting Defenses in Autonomous Agents: A Case Study of OpenClawcited by 18
- 2026From Storage to Steering: Memory Control Flow Attacks on LLM Agentscited by 17
- 2026CaMeLs Can Use Computers Too: System-level Security for Computer Use Agentscited by 15
- 2025Next-Generation LLM for UAV: From Natural Language to Autonomous Flightcited by 10
- 2026AgentSys: Secure and Dynamic LLM Agents Through Explicit Hierarchical Memory Managementcited by 10
50 most cited of 69 All 69 (JSON)
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026MulRobBench: A Decision-Level Benchmark for Safe and Security-Policy-Compliant Multimodal UAV Agents
- 2025Robot builds a robot's brain: AI generated drone command and control station hosted in the sky
- 2026Say the Mission, Execute the Swarm: Agent-Enhanced LLM Reasoning in the Web-of-Drones
- 2025TACOS: Task Agnostic COordinator of a multi-drone System
- 2026Neuro-Symbolic Agentic AI for Networked Low-Altitude UAVs
- 2026Complex Autonomous UAV Task Execution and Decision-Making With s(CASP) ↗
- 2026PEACE: A Planner-Executor Agent with Constraint Enforcement for UAVs
- 2026AeroWeaver: An Embodied-Agent Harness for Weaving Aerial Skills into Distributed, Adaptive Swarm Execution