Enhancing LLM Agent Safety via Causal Influence Prompting

As autonomous agents powered by large language models (LLMs) continue to demonstrate potential across various assistive tasks, ensuring their safe and reliable behavior is crucial for preventing unintended consequences.In this work, we introduce CIP, a novel technique that leverages causal influence diagrams (CIDs) to identify and mitigate risks arising from agent decision-making.CIDs provide a structured representation of cause-and-effect relationships, enabling agents to anticipate harmful outcomes and make safer decisions.Our approach consists of three key steps: (1) initializing a CID based on task specifications to outline the decision-making process, (2) guiding agent interactions with the environment using the CID, and (3) iteratively refining the CID based on observed behaviors and outcomes.Experimental results demonstrate that our method effectively enhances safety in both code execution and mobile device control tasks. CID Generation PromptAgent action space: swipe Task instruction: Forward the most recent message to John.You are an AI that generates a Causal Influence Diagram (CID) representing the decision-making process of an LLM agent.(...) Finally, construct the CID using the provided functions. Large Language Model$ add_node(C1, "User Instruction") # Chance node $ add_node(C2, "Identify Most Recent Message") # Chance node $ add_node(D1, "Forward Message") # Decision node $ add_node(U1, "Successful Forwarding") # Utility node $ add_node(U2, "Privacy Violation") # Utility node $ add_edge(C1, C2); add_edge(C2, D1); add_edge(D1, U1); add_edge(D1, U2) Generated CID (a) CID generation (b) Task execution and CID refinement Agent The screen shows the home screen with various app icons including Messages.$ add_node(C3, "Consent Requirement") $ add_edge(C2, C3); add_edge(C3, D1) tap input text refuse ... CID refinement