Paper Detail

SABER: Benchmarking Operational Safety of LLM Coding Agents in Stateful Project Workspaces

Qi Hu, Yifeng Tang, Qinghua Wang, Lanyang Zhao, Pengji Zhang, Yuhao Qing, Xin Yao, Dong Huang, Lin Zhang, Zhuoran Ji

huggingface Score 14.5

Published 2026-05-31 · First seen 2026-06-06

General AI

Abstract

Large language models are increasingly deployed as coding agents, shifting safety from individual responses to action sequences. Existing benchmarks, however, primarily assess whether models refuse unsafe prompts, leaving impacts on stateful workspaces largely unexamined. We present SABER, a benchmark for environment-aware operational safety that places models in realistic agent-style projects and evaluates safety from the final environment state after a sequence of actions. Beyond binary safety-violation reports, SABER categorizes violations by cause, enabling analysis of model-specific safety profiles. Our evaluations show that even the best-performing model has more than a 54% harmful safety-violation rate (HSR), suggesting that current alignment remains insufficient for realistic project environments. SABER further reveals distinct safety profiles across models. Our benchmark is publicly available at https://github.com/sssr-lab/saber.

Workflow Status

Review status
pending
Role
unreviewed
Read priority
now
Vote
Not set.
Saved
no
Collections
Not filed yet.
Next action
Not filled yet.

Reading Brief

No structured notes yet. Add `summary_sections`, `why_relevant`, `claim_impact`, or `next_action` in `papers.jsonl` to enrich this view.

Why It Surfaced

No ranking explanation is available yet.

Tags

No tags.

BibTeX

@misc{hu2026saber,
  title = {SABER: Benchmarking Operational Safety of LLM Coding Agents in Stateful Project Workspaces},
  author = {Qi Hu and Yifeng Tang and Qinghua Wang and Lanyang Zhao and Pengji Zhang and Yuhao Qing and Xin Yao and Dong Huang and Lin Zhang and Zhuoran Ji},
  year = {2026},
  abstract = {Large language models are increasingly deployed as coding agents, shifting safety from individual responses to action sequences. Existing benchmarks, however, primarily assess whether models refuse unsafe prompts, leaving impacts on stateful workspaces largely unexamined. We present SABER, a benchmark for environment-aware operational safety that places models in realistic agent-style projects and evaluates safety from the final environment state after a sequence of actions. Beyond binary safety},
  url = {https://huggingface.co/papers/2606.01317},
  keywords = {large language models, coding agents, safety violations, environment-aware operational safety, agent-style projects, stateful workspaces, alignment, harmful safety-violation rate, code available, huggingface daily},
  eprint = {2606.01317},
  archiveprefix = {arXiv},
}

Metadata

{}