Live
🔥 OpenBMB/ChatDevGitHub Trending🔥 microsoft/agent-lightningGitHub Trending🔥 apache/supersetGitHub Trending🔥 shanraisshan/claude-code-best-practiceGitHub TrendingA-SelecT: Automatic Timestep Selection for Diffusion Transformer Representation LearningarXivGUIDE: Resolving Domain Bias in GUI Agents through Real-Time Web Video Retrieval and Plug-and-Play AnnotationarXivSommelier: Scalable Open Multi-turn Audio Pre-processing for Full-duplex Speech Language ModelsarXivCANGuard: A Spatio-Temporal CNN-GRU-Attention Hybrid Architecture for Intrusion Detection in In-Vehicle CAN NetworksarXivDesignWeaver: Dimensional Scaffolding for Text-to-Image Product DesignarXivA Lightweight, Transferable, and Self-Adaptive Framework for Intelligent DC Arc-Fault Detection in Photovoltaic SystemsarXivConsistency Amplifies: How Behavioral Variance Shapes Agent AccuracyarXivStabilizing Rubric Integration Training via Decoupled Advantage NormalizationarXivSemi-Automated Knowledge Engineering and Process Mapping for Total Airport ManagementarXivAIRA_2: Overcoming Bottlenecks in AI Research AgentsarXivBeSafe-Bench: Unveiling Behavioral Safety Risks of Situated Agents in Functional EnvironmentsarXiv🔥 OpenBMB/ChatDevGitHub Trending🔥 microsoft/agent-lightningGitHub Trending🔥 apache/supersetGitHub Trending🔥 shanraisshan/claude-code-best-practiceGitHub TrendingA-SelecT: Automatic Timestep Selection for Diffusion Transformer Representation LearningarXivGUIDE: Resolving Domain Bias in GUI Agents through Real-Time Web Video Retrieval and Plug-and-Play AnnotationarXivSommelier: Scalable Open Multi-turn Audio Pre-processing for Full-duplex Speech Language ModelsarXivCANGuard: A Spatio-Temporal CNN-GRU-Attention Hybrid Architecture for Intrusion Detection in In-Vehicle CAN NetworksarXivDesignWeaver: Dimensional Scaffolding for Text-to-Image Product DesignarXivA Lightweight, Transferable, and Self-Adaptive Framework for Intelligent DC Arc-Fault Detection in Photovoltaic SystemsarXivConsistency Amplifies: How Behavioral Variance Shapes Agent AccuracyarXivStabilizing Rubric Integration Training via Decoupled Advantage NormalizationarXivSemi-Automated Knowledge Engineering and Process Mapping for Total Airport ManagementarXivAIRA_2: Overcoming Bottlenecks in AI Research AgentsarXivBeSafe-Bench: Unveiling Behavioral Safety Risks of Situated Agents in Functional EnvironmentsarXiv

BeSafe-Bench: Unveiling Behavioral Safety Risks of Situated Agents in Functional Environments

arXivMarch 30, 202610 min read0 views
Source Quiz

arXiv:2603.25747v1 Announce Type: new Abstract: The rapid evolution of Large Multimodal Models (LMMs) has enabled agents to perform complex digital and physical tasks, yet their deployment as autonomous decision-makers introduces substantial unintentional behavioral safety risks. However, the absence of a comprehensive safety benchmark remains a major bottleneck, as existing evaluations rely on low-fidelity environments, simulated APIs, or narrowly scoped tasks. To address this gap, we present BeSafe-Bench (BSB), a benchmark for exposing behavioral safety risks of situated agents in functional — Yuxuan Li, Yi Lin, Peng Wang, Shiming Liu, Xuetao Wei

View PDF HTML (experimental)

Abstract:The rapid evolution of Large Multimodal Models (LMMs) has enabled agents to perform complex digital and physical tasks, yet their deployment as autonomous decision-makers introduces substantial unintentional behavioral safety risks. However, the absence of a comprehensive safety benchmark remains a major bottleneck, as existing evaluations rely on low-fidelity environments, simulated APIs, or narrowly scoped tasks. To address this gap, we present BeSafe-Bench (BSB), a benchmark for exposing behavioral safety risks of situated agents in functional environments, covering four representative domains: Web, Mobile, Embodied VLM, and Embodied VLA. Using functional environments, we construct a diverse instruction space by augmenting tasks with nine categories of safety-critical risks, and adopt a hybrid evaluation framework that combines rule-based checks with LLM-as-a-judge reasoning to assess real environmental impacts. Evaluating 13 popular agents reveals a concerning trend: even the best-performing agent completes fewer than 40% of tasks while fully adhering to safety constraints, and strong task performance frequently coincides with severe safety violations. These findings underscore the urgent need for improved safety alignment before deploying agentic systems in real-world settings.

Subjects:

Artificial Intelligence (cs.AI)

Cite as: arXiv:2603.25747 [cs.AI]

(or arXiv:2603.25747v1 [cs.AI] for this version)

https://doi.org/10.48550/arXiv.2603.25747

arXiv-issued DOI via DataCite

Submission history

From: Xuetao Wei [view email] [v1] Fri, 30 Jan 2026 03:41:57 UTC (1,705 KB)

Original source

arXiv

Was this article helpful?

Sign in to highlight and annotate this article

AI
Ask AI about this article
Powered by AI News Hub · full article context loaded
Ready

Conversation starters

Ask anything about this article…

Daily AI Digest

Get the top 5 AI stories delivered to your inbox every morning.

More about

researchpaperarxiv

Knowledge Map

Knowledge Map
TopicsEntitiesSource
BeSafe-Benc…researchpaperarxivaiartificial-…arXiv

Connected Articles — Knowledge Graph

This article is connected to other articles through shared AI topics and tags.

Knowledge Graph100 articles · 338 connections
Scroll to zoom · drag to pan · click to open

Discussion

Sign in to join the discussion

No comments yet — be the first to share your thoughts!

More in Research Papers