AGENTSAFE: Benchmarking the Safety of Embodied Agents on Hazardous Instructions

Fuente: arXiv
Salvato in:
Dettagli Bibliografici
Autori principali: Ying, Zonghao, Wang, Le, Xiao, Yisong, Wang, Jiakai, Ma, Yuqing, Guo, Jinyang, Yin, Zhenfei, Zhang, Mingchuan, Liu, Aishan, Liu, Xianglong
Natura: Preprint
Pubblicazione: 2025
Soggetti:
Accesso online:
Tags: Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
_version_ 1866911218918227968
author Ying, Zonghao
Wang, Le
Xiao, Yisong
Wang, Jiakai
Ma, Yuqing
Guo, Jinyang
Yin, Zhenfei
Zhang, Mingchuan
Liu, Aishan
Liu, Xianglong
author_facet Ying, Zonghao
Wang, Le
Xiao, Yisong
Wang, Jiakai
Ma, Yuqing
Guo, Jinyang
Yin, Zhenfei
Zhang, Mingchuan
Liu, Aishan
Liu, Xianglong
contents The integration of vision-language models (VLMs) is driving a new generation of embodied agents capable of operating in human-centered environments. However, as deployment expands, these systems face growing safety risks, particularly when executing hazardous instructions. Current safety evaluation benchmarks remain limited: they cover only narrow scopes of hazards and focus primarily on final outcomes, neglecting the agent's full perception-planning-execution process and thereby obscuring critical failure modes. Therefore, we present SAFE, a benchmark for systematically assessing the safety of embodied VLM agents on hazardous instructions. SAFE comprises three components: SAFE-THOR, an extensible adversarial simulation sandbox with a universal adapter that maps high-level VLM outputs to low-level embodied controls, supporting diverse agent workflow integration; SAFE-VERSE, a risk-aware task suite inspired by Asimov's Three Laws of Robotics, comprising 45 adversarial scenarios, 1,350 hazardous tasks, and 9,900 instructions that span risks to humans, environments, and agents; and SAFE-DIAGNOSE, a multi-level and fine-grained evaluation protocol measuring agent performance across perception, planning, and execution. Applying SAFE to nine state-of-the-art VLMs and two embodied agent workflows, we uncover systematic failures in translating hazard recognition into safe planning and execution. Our findings reveal fundamental limitations in current safety alignment and demonstrate the necessity of a comprehensive, multi-stage evaluation for developing safer embodied intelligence.
format Preprint
id arxiv_https___arxiv_org_abs_2506_14697
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle AGENTSAFE: Benchmarking the Safety of Embodied Agents on Hazardous Instructions
Ying, Zonghao
Wang, Le
Xiao, Yisong
Wang, Jiakai
Ma, Yuqing
Guo, Jinyang
Yin, Zhenfei
Zhang, Mingchuan
Liu, Aishan
Liu, Xianglong
Cryptography and Security
Robotics
The integration of vision-language models (VLMs) is driving a new generation of embodied agents capable of operating in human-centered environments. However, as deployment expands, these systems face growing safety risks, particularly when executing hazardous instructions. Current safety evaluation benchmarks remain limited: they cover only narrow scopes of hazards and focus primarily on final outcomes, neglecting the agent's full perception-planning-execution process and thereby obscuring critical failure modes. Therefore, we present SAFE, a benchmark for systematically assessing the safety of embodied VLM agents on hazardous instructions. SAFE comprises three components: SAFE-THOR, an extensible adversarial simulation sandbox with a universal adapter that maps high-level VLM outputs to low-level embodied controls, supporting diverse agent workflow integration; SAFE-VERSE, a risk-aware task suite inspired by Asimov's Three Laws of Robotics, comprising 45 adversarial scenarios, 1,350 hazardous tasks, and 9,900 instructions that span risks to humans, environments, and agents; and SAFE-DIAGNOSE, a multi-level and fine-grained evaluation protocol measuring agent performance across perception, planning, and execution. Applying SAFE to nine state-of-the-art VLMs and two embodied agent workflows, we uncover systematic failures in translating hazard recognition into safe planning and execution. Our findings reveal fundamental limitations in current safety alignment and demonstrate the necessity of a comprehensive, multi-stage evaluation for developing safer embodied intelligence.
title AGENTSAFE: Benchmarking the Safety of Embodied Agents on Hazardous Instructions
topic Cryptography and Security
Robotics
url https://arxiv.org/abs/2506.14697