mlsanityData to 14 Oct 2026

Adversarial Stress Testing of Role-Playing Language Agents using Multi-Agent Evaluation

arXiv 2608.03166 ↗First posted 4 Aug 2026cs.AIcited by 0

On the map: LLM agents and tool use → Social simulation and multi-agent debate

Abstract (arXiv)

Role-Playing Language Agents (RPLAs) are increasingly deployed in high-stakes applications such as healthcare assistance, customer support, and education, where maintaining consistent personas, ethical constraints, and behavioral coherence under adversarial pressure is critical. Existing evaluation approaches rely on static benchmarks or isolated single-turn prompts that fail to capture cumulative behavioral failures emerging over extended interactions. We present a modular multi-agent platform for adversarially stress-testing RPLAs through structured, multi-turn dialogue. The system coordinates three agents: a strategy-driven Interrogator Agent that applies six progressive adversarial strategies, a Target Agent representing the RPLA under evaluation, and an automated Judging Agent that scores behavior across role fidelity, drift, ethical deviation, and consistency dimensions. Through experiments across three personas and three LLM families, we demonstrate that multi-strategy adversarial evaluation reveals failure modes invisible to single-strategy testing, reducing overall robustness scores by 0.17--0.20 points on average. Cross-model validation confirms consistent degradation patterns across Llama-3.3-70B, GPT-4o-mini, and Claude-3.5-Haiku, with Authority Challenge and Emotional Manipulation emerging as the most effective attack strategies. Automated judging achieves strong human alignment (r = 0.82, Fleiss' kappa = 0.71). This work is released as an open-source platform to support AI safety and reproducible RPLA benchmarking. While the framework enables systematic discovery of failure modes, we acknowledge potential ethical risks associated with adversarial testing methodologies and emphasize responsible usage for improving AI safety.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Social simulation and multi-agent debate, one of 16 directions in LLM agents and tool use. Builds on 16 of its 29 references that are in the map. First posted on arXiv 4 Aug 2026.

Builds on

16 of 29 references.

Closest ancestors · 1

Same direction, newest first

  1. 2025RedDebate: Safer Responses Through Multi-Agent Red Teaming Debates4 Jun

Other references · 15

  1. 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
  2. 2024AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agentscited by 437
  3. 2023Red-Teaming Large Language Models using Chain of Utterances for Safety-Alignmentcited by 223
  4. 2023MART: Improving LLM Safety with Multi-round Automatic Red-Teamingcited by 163
  5. 2025SWEET-RL: Training Multi-Turn LLM Agents on Collaborative Reasoning Taskscited by 118
  6. 2023Evil Geniuses: Delving into the Safety of LLM-based Agentscited by 106
  7. 2025From Prompt Injections to Protocol Exploits: Threats in LLM-Powered AI Agents Workflowscited by 58
  8. 2023AART: AI-Assisted Red-Teaming with Diverse Data Generation for New LLM-powered Applicationscited by 54
  9. 2025Foot-In-The-Door: A Multi-turn Jailbreak for LLMscited by 54
  10. 2024RedAgent: Red Teaming Large Language Models with Context-aware Autonomous Language Agentcited by 44
  11. 2025AutoRedTeamer: Autonomous Red Teaming with Lifelong Attack Integrationcited by 43
  12. 2025RAS-Eval: A Comprehensive Benchmark for Security Evaluation of LLM Agents in Real-World Environmentscited by 17
3 more
  1. 2025CoP: Agentic Red-teaming for Large Language Models using Composition of Principlescited by 13
  2. 2025JPS: Jailbreak Multimodal Large Language Models with Collaborative Visual Perturbation and Textual Steeringcited by 11
  3. 2025Exposing Weak Links in Multi-Agent Systems under Adversarial Promptingcited by 8

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026Role-Playing Agents Driven by Large Language Models: Current Status, Challenges, and Future Trends
  2. 2026Adversarial Closed-Loop Curriculum for Evolving Role-Playing Agents
  3. 2026DynSess: Dynamic Session-Level Evaluation and Optimization Framework for Role-Playing Agents
  4. 2025Test-Time-Matching: Decouple Personality, Memory, and Linguistic Style in LLM-based Role-Playing Language Agent
  5. 2026RPA-Check: A Multi-Stage Automated Framework for Evaluating Dynamic LLM-based Role-Playing Agents
  6. 2026RoleCDE:Benchmarking and Mitigating Role-Alignment Trade-offs in Role-Playing Agents
  7. 2025Adversarial Testing in LLMs: Insights into Decision-Making Vulnerabilities
  8. 2025SpeechRole: A Large-Scale Dataset and Benchmark for Evaluating Speech Role-Playing Agents