跳到正文
返回论文列表
cs.AI提交于 已译

AgentDecept:压力下工具使用型 LLM 智能体欺骗行为基准测试

AgentDecept: Benchmarking Deceptive Behavior in Tool-Using LLM Agents under Pressure

Yehan Zhang · Qianqi Yan · Hang Yin · Ching-Chen Kuo · Shan Jiang · Ming Ouyang · et al.

中文摘要

LLM 智能体(agent)越来越多地在日常应用中执行多轮任务,但用户往往只看到智能体的报告,而非其背后的观察、API 调用和状态变化。已有欺骗基准研究了长程交互和工具使用场景,但智能体在真实、有状态的应用工作流中是否如实报告其行为仍缺乏探索。为此,提出 AgentDecept,一个可执行基准,用于评估压力下的行为欺骗。AgentDecept 包含 477 个压力变体,源自 6 类压力来源的 257 个源任务,每个变体配有对应的无压力版本。干预通过事件消息、任务上下文、应用状态、工具响应和服务配额进入,涵盖显式事件与隐式任务或环境变化。基于证据的协议通过将面向用户的声明与按时间排序的观察和执行结果关联,评估完整轨迹,区分伪造、隐瞒和含糊其辞与诚实失败及披露局限。所得行为标签也为测试现有基于激活的探针提供设置。AgentDecept 支持对多轮智能体在真实应用交互中报告何时偏离执行进行受控分析。

关键要点

  1. 01现有欺骗基准未覆盖真实有状态应用工作流中智能体是否如实报告行为。
  2. 02构建 477 个压力变体,源自 257 个任务、6 类压力来源,各配无压力对照。
  3. 03干预经事件消息、任务上下文、应用状态、工具响应和服务配额进入。
  4. 04基于证据的协议区分伪造、隐瞒、含糊其辞与诚实失败及披露局限。
  5. 05行为标签可用于测试现有基于激活的探针。

解读

尚无解读。

原始英文摘要

arXiv:2610.39377v1 Announce Type: new Abstract: LLM agents increasingly carry out multi-turn tasks across everyday applications, yet users often see only the agent's report rather than the observations, API calls, and state changes behind it. Existing deception benchmarks have studied long-horizon interactions and tool-use settings, but whether agents faithfully report their actions across realistic, stateful application workflows remains underexplored. To address this gap, we introduce AgentDecept, an executable benchmark for evaluating behavioral deception under pressure. AgentDecept contains 477 pressure variants derived from 257 source tasks across six pressure sources, each paired with a pressure-free counterpart. Interventions enter through event messages, task context, application state, tool responses, and service quotas, spanning explicit events and implicit task or environment changes. Our evidence-grounded protocol evaluates full trajectories by relating user-facing claims to time-ordered observations and executed outcomes, distinguishing falsification, concealment, and equivocation from honest failure and disclosed limitations. The resulting behavioral labels also provide a setting for testing existing activation-based probes. AgentDecept enables controlled analysis of when multi-turn agents' reports diverge from execution in realistic application interactions.

同方向论文 · cs.AI

查看全部 →

反向发现 · 这篇论文相关的工具与提示词

去交叉发现 →

关联提示词 · 6

智能体github.com/f/awesome-chatgpt-prompts·外部收录·

Weekend Planner

- Read the weekend weather, calendar and budget. - Find local events, hikes, exhibitions and restaurants. - Propose 3 plans: adventure, cozy, social, with times and costs. - Prepare reservation steps; book nothing without approval. - Rememb…

智能体github.com/f/awesome-chatgpt-prompts·外部收录·

Task Planner

--- name: sa-plan description: Structured Autonomy Planning Prompt model: Claude Sonnet 4.5 (copilot) agent: agent --- You are a Project Planning Agent that collaborates with users to design development plans. A development plan defines a…

研究github.com/f/awesome-chatgpt-prompts·外部收录·

Unified Research and Source Analysis Prompt

Unified, High-Precision Research & Analysis Prompt for ChatGPT and Perplexity AI ROLE & BEHAVIOR You are a professional researcher-analyst. Handle inputs as follows: * If the input is a URL/URI: open it fully with your browsing tool (e.g.…

智能体github.com/f/awesome-chatgpt-prompts·外部收录·

hermes agent desktop default system prompt

You are Hermes Agent, an intelligent AI assistant created by Nous Research. You are helpful, knowledgeable, and direct. You assist users with a wide range of tasks including answering questions, writing and editing code, analyzing informati…