arxiv-2503-15707 SRC-0537 · paper

Safety Aware Task Planning via Large Language Models in Robotics

A. Khan, Michael Andrev, M. Murtaza, Sergio Aguilera, Rui Zhang, Jie Ding

Created: 2025-03-19 · Ingested: 2026-09-23

The integration of large language models (LLMs) into robotic task planning has unlocked better reasoning capabilities for complex, long-horizon workflows. However, ensuring safety in LLM-driven plans remains a critical challenge, as these models often prioritize task completion over risk mitigation. This paper introduces SAFER (Safety-Aware Framework for Execution in Robotics), a multi-LLM framework designed to embed safety awareness into robotic task planning. SAFER employs a Safety Agent that operates alongside the primary task planner, providing safety feedback. Additionally, we introduce L

In brief

Splitting task planning and safety auditing across 2 separate LLMs cuts safety violations in robot plans without much efficiency cost, and when no safety instruction is given, planners default to fast plans that omit hazard checks.

SAFER pairs a Task Planning LLM with a Safety Planning LLM that audits and refines each plan, adds per-robot Execution LLMs and a feedback loop, and scores plans with an LLM-as-a-Judge against 15 risk criteria. Control Barrier Functions enforce joint and workspace constraints at the controller. Evaluation used 40 tasks from the COHERENT multi-agent benchmark (5 scenes, 8 tasks each: 2 mono-type, 3 dual-type, 3 trio-type), with GPT-4o and DeepSeek-r1.

Average safety violations fell 47% with GPT-4o and 77.5% with DeepSeek-r1 relative to the GPT-4o non-safety baseline. Average steps were comparable or lower for SAFER-GPT-4o, higher for SAFER-r1. Added latency and cost were small, attributed to 2 extra API calls per step.

The effect is measured, but the outcome metric is the paper's own LLM judge, with no human-labelled violations and no matched-token-budget single-LLM baseline carrying the same safety prompt. Only 1 non-safety baseline (GPT-4o) was run, so the r1 gain confounds framework and model.

Hardware used 2 Kuka IIWA arms on mobile bases, Vicon tracking, 1 task, 1 human, reported as a successful run without quantitative comparison.

Treat the violation reductions as suggestive of role decomposition helping, not as a validated safety guarantee.

Written from the abstract by claude-opus-5 on 2026-10-24, with every figure checked against it. Not a substitute for the paper.

Referenced by

Claims in this catalog that draw on this source, and whether as support or counterpoint.

No claims cite this yet.