Skip to content
Review

Using AI Agents to Automate Black-Box Audits of Personalization Algorithms at Scale

Jun 2026 · arXiv.org · Vol abs/2606.30801 · 0 citations · 82 references
Computer Science

TL;DR

This work introduces a framework for black-box audits of personalization algorithms using generative AI agents as behavioral engines for synthetic accounts and establishes GenAI-based agents as a new tool for algorithmic auditing.

Abstract

Personalization algorithms determine what content users encounter on online platforms. Auditing these systems is difficult because independent auditors have only black-box access to the algorithms, while personalization depends on users'attributes, behavior, and evolving interaction histories. Existing auditing methods face a tradeoff: studies with real users capture realistic behavior but are costly and hard to control, whereas sock-puppet audits scale more easily but often rely on scripted behavior that limits realism. Beyond this, both approaches struggle to decouple user attributes from user behavior, limiting our ability to causally understand personalization. To address this gap, we introduce a framework for black-box audits of personalization algorithms using generative AI agents as behavioral engines for synthetic accounts. Each agent is instantiated with a fixed persona, grounded in demographic and political survey data, and interacts with a platform's content by reasoning about it and choosing actions. Because behavior is fixed within each persona while platform-visible signals such as age, gender, or location can be experimentally perturbed, our design enables counterfactual auditing of how platforms respond to user attributes. As a case study, we deploy 1,120 agents on X shortly after the 2024 U.S. election, spanning 14 personas and three counterfactual conditions, collecting over 200,000 content exposures. We find that X's algorithmic feed amplifies toxic, polarizing, political, and right-leaning content relative to the chronological feed, with amplification varying sharply by user ideology. Counterfactual analyses show that demographic signals affect content delivery in persona-dependent ways: pooled effects are largely null, while subgroup-level effects vary in direction and magnitude. Our work establishes GenAI-based agents as a new tool for algorithmic auditing.

View source

Similar papers

Preprint Aug 2026

ADeptS-Bench: Measuring the Trustworthiness of Computer Use Agents Across Devices

ADeptS-Bench is introduced, a dual-stream trustworthiness benchmark, grounded in the ADEPTS capability framework and general population user studies, and reveals that all models overestimate consequence severity, mirroring the over-refusal bias observed in safety.

Joy Chen, Alejandro Castillejo Munoz, P. D'Oro et al. · 0 citations
Preprint Jul 2026

ResearchArena: Evaluating Sabotage and Monitoring in Automated AI R&D

ResearchArena is released as a modular framework for evaluating sabotage and control in automated AI R&D with ResearchArena, a framework spanning four long-horizon tasks: safety post-training, capabilities post-training, CUDA-kernel optimization, and inference-server optimization.

Lena Libon, Ben Rank, Jehyeok Yeon et al. · 0 citations
Review Aug 2026

Do User-Authored Permission Policies Improve Protection Against AI Agent Overreach?

A mechanism in which a language model maps actions to plain-language consequence categories with user-authored"allow","ask", or"never"rules is examined, and a gap between preference and commitment is revealed: repeatedly choosing "ask" preserves case-by-case choice but prevents a standing policy from settling decisions...

Ting Yan · 0 citations
Preprint Aug 2026

Daydreaming: Stealing Hidden Agent Skills through Black-Box Task Interaction

Daydreaming is presented, an execution-only attack that steals a multi-file skill through black-box task interactions and produces installable skills using a median of 32 victim calls per skill even with disclosure defenses enabled.

Yu-Lin Tsai, Yu-An Lu, Ci-Yang Tsai et al. · 0 citations
Preprint Jul 2026

Toward User-Conditioned Evaluation of Personal LLM Agents under Temporal Interventions

A minimal benchmark design and candidate reporting metrics for user-conditioned adaptation are proposed and a concrete design requirement for future personal-agent evaluation, with metrics used as reporting tools for that requirement.

Pinyan Qian, Su Wang, Yihang Chen et al. · 2 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.