mlsanityData to 7 Oct 2026

GuardianAgentBench: Where Agents Fail and How to Guard Them

arXiv 2607.20982 ↗First posted 23 Jul 2026cs.AIcited by 1

On the map: LLM agents and tool use → Agent threats, guardrails and governance

Abstract (arXiv)

As large language model agents increasingly operate autonomously with access to tools and external environments, ensuring their safe and reliable behavior becomes critical. We present GuardianAgentBench (GABench), a benchmark of 580 scenarios across six domains evaluated on three production-ready frameworks: LangChain, LlamaIndex, and Vectara. The benchmark incorporates rigorous multi-stage validation and five adversarial attack modes. Experiments with six state-of-the-art models reveal that even the strongest configuration achieves only 74.8% overall accuracy and expose two distinct failure regimes: stronger models under-call required tools, while weaker models mis-select and over-call tools. Performance degrades monotonically with both tool-set size and sequential turn depth, with long-horizon planning proving the steeper bottleneck. Our guardrail implementation consistently outperforms system-prompt-based defenses across all models, recovering 19.9% of failures at a false positive rate of just 0.5%. These results demonstrate that execution-time structural intervention improves safety without disrupting correct agent behavior.

Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 19 of its 51 references that are in the map. First posted on arXiv 23 Jul 2026.

Builds on

19 of 51 references.

Closest ancestors · 15

Same direction, newest first

  1. 2026Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents13 Feb
  2. 2026AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security26 Jan
  3. 2025Enforcing Temporal Constraints for LLM Agents25 Dec
  4. 2025Building a Foundational Guardrail for General Agentic Systems via Synthetic Data10 Oct
  5. 2025VeriGuard: Enhancing LLM Agent Safety via Verified Code Generation3 Oct
  6. 2025Measuring Harmfulness of Computer-Using Agents31 Jul
  7. 2025AgentAuditor: Human-Level Safety and Security Evaluation for LLM Agents31 May
  8. 2025ShieldAgent: Shielding Agents via Verifiable Safety Policy Reasoning26 Mar
  9. 2025SafeArena: Evaluating the Safety of Autonomous Web Agents6 Mar
  10. 2025AGrail: A Lifelong Agent Guardrail with Effective and Adaptive Safety Detection17 Feb
  11. 2025AgentGuard: Repurposing Agentic Orchestrator for Safety Evaluation of Tool Orchestration13 Feb
  12. 2024Agent-SafetyBench: Evaluating the Safety of LLM Agents19 Dec
3 more
  1. 2024AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents11 Oct
  2. 2024R-Judge: Benchmarking Safety Risk Awareness for LLM Agents18 Jan
  3. 2023Identifying the Risks of LM Agents with an LM-Emulated Sandbox25 Sep

Other references · 4

  1. 2025Qwen3 Technical Reportcited by 8,195
  2. 2025gpt-oss-120b & gpt-oss-20b Model Cardcited by 1,258
  3. 2025DeepSeek-V3.2: Pushing the Frontier of Open Large Language Modelscited by 755
  4. 2024MobileSafetyBench: Evaluating Safety of Autonomous Agents in Mobile Device Controlcited by 49

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2026Beyond the Leaderboard: A Synthesis of Tool-Use, Planning, and Reasoning Failures in Large Language Model Agents
  2. 2026BLINDSPOT: A Benchmark for Safety and Refusal Calibration in Long-Horizon Tool-Using Agents
  3. 2026EvoSafeHarness: Evolving Model- and Domain-Specific Harnesses for Securing Agents
  4. 2026SafeClawBench: Separating Semantic, Audit-Evidence, and Sandbox Harm in Tool-Using LLM Agents
  5. 2026REDAgentBench: Executable Red Teaming and Faithful Measurement of LLM Agent Systems
  6. 2026SkillSafetyBench: Evaluating Agent Safety under Skill-Facing Attack Surfaces
  7. 2025How Do LLMs Fail In Agentic Scenarios? A Qualitative Analysis of Success and Failure Scenarios of Various LLMs in Agentic Simulations
  8. 2025PALADIN: Self-Correcting Language Model Agents to Cure Tool-Failure Cases