Characteristics of Harmful Text: Towards Rigorous Benchmarking of Language Models
Not on the map. Why?
Abstract (arXiv)
Large language models produce human-like text that drive a growing number of applications. However, recent literature and, increasingly, real world observations, have demonstrated that these models can generate language that is toxic, biased, untruthful or otherwise harmful. Though work to evaluate language model harms is under way, translating foresight about which harms may arise into rigorous benchmarks is not straightforward. To facilitate this translation, we outline six ways of characterizing harmful text which merit explicit consideration when designing new benchmarks. We then use these characteristics as a lens to identify trends and gaps in existing benchmarks. Finally, we apply them in a case study of the Perspective API, a toxicity classifier that is widely used in harm benchmarks. Our characteristics provide one piece of the bridge that translates between foresight and effective evaluation.
Key facts. Cited by 49 papers in the map (data through 14 Oct 2026). Builds on 58 of its 112 references that are in the map. First posted on arXiv 16 Jun 2022.
Builds on
58 of 112 references.
References · 58
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2022PaLM: Scaling Language Modeling with Pathwayscited by 5,326
- 2021On the Opportunities and Risks of Foundation Modelscited by 4,033
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
- 2019A Survey on Bias and Fairness in Machine Learningcited by 1,917
- 2019Transformer-XL: Attentive Language Models Beyond a Fixed-Length Contextcited by 1,850
- 2016Man is to Computer Programmer as Woman is to Homemaker? Debiasing Word Embeddingscited by 1,312
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,255
- 2021Scaling Language Models: Methods, Analysis & Insights from Training Gophercited by 1,202
- 2018Model Cards for Model Reportingcited by 1,080
- 2020Beyond Accuracy: Behavioral Testing of NLP models with CheckListcited by 1,006
38 more
- 2021Ethical and social risks of harm from Language Modelscited by 966
- 2020Language (Technology) is Power: A Critical Survey of "Bias" in NLPcited by 956
- 2020StereoSet: Measuring stereotypical bias in pretrained language modelscited by 924
- 2019Plug and Play Language Models: A Simple Approach to Controlled Text Generationcited by 799
- 2020Aligning AI With Shared Human Valuescited by 723
- 2020CrowS-Pairs: A Challenge Dataset for Measuring Social Biases in Masked Language Modelscited by 710
- 2021BBQ: A Hand-Built Bias Benchmark for Question Answeringcited by 701
- 2018Gender Bias in Coreference Resolution: Evaluation and Debiasing Methodscited by 659
- 2019The Woman Worked as a Babysitter: On Biases in Language Generationcited by 541
- 2021Documenting Large Webtext Corpora: A Case Study on the Colossal Clean Crawled Corpuscited by 492
- 2018Gender Bias in Coreference Resolutioncited by 442
- 2022ToxiGen: A Large-Scale Machine-Generated Dataset for Adversarial and Implicit Hate Speech Detectioncited by 422
- 2021BOLD: Dataset and Metrics for Measuring Biases in Open-Ended Language Generationcited by 412
- 2019Nuanced Metrics for Measuring Unintended Bias with Real Data for Text Classificationcited by 404
- 2020GeDi: Generative Discriminator Guided Sequence Generationcited by 378
- 2021Persistent Anti-Muslim Bias in Large Language Modelscited by 377
- 2021Self-Diagnosis and Self-Debiasing: A Proposal for Reducing Corpus-Based Bias in NLPcited by 337
- 2021Towards Understanding and Mitigating Social Biases in Language Modelscited by 296
- 2022Challenges and Strategies in Cross-Cultural NLPcited by 218
- 2016Ex Machina: Personal Attacks Seen at Scalecited by 210
- 2021Societal Biases in Language Generation: Progress and Challengescited by 202
- 2016Demographic Dialectal Variation in Social Media: A Case Study of African-American Englishcited by 196
- 2021Process for Adapting Language Models to Society (PALMS) with Values-Targeted Datasetscited by 181
- 2021Challenges in Detoxifying Language Modelscited by 169
- 2021Alignment of Language Agentscited by 168
- 2019Reducing Sentiment Bias in Language Models via Counterfactual Evaluationcited by 148
- 2020Intrinsic Bias Metrics Do Not Correlate with Application Biascited by 148
- 2019Fairness-Aware Ranking in Search & Recommendation Systems with Application to LinkedIn Talent Searchcited by 138
- 2020Towards Accountability for Machine Learning Datasets: Practices from Software Engineering and Infrastructurecited by 138
- 2019Predictive Biases in Natural Language Processing Models: A Conceptual Framework and Overviewcited by 137
- 2020UnQovering Stereotyping Biases via Underspecified Questionscited by 126
- 2019Towards a Critical Race Methodology in Algorithmic Fairnesscited by 125
- 2020A Distributional Approach to Controlled Text Generationcited by 119
- 2021Detoxifying Language Models Risks Marginalizing Minority Voicescited by 107
- 2021Re-imagining Algorithmic Fairness in India and Beyondcited by 104
- 2020Decolonial AI: Decolonial Theory as Sociotechnical Foresight in Artificial Intelligencecited by 101
- 2020Investigating African-American Vernacular English in Transformer-Based Text Generationcited by 53
- 2020Toxic Language Detection in Social Media for Brazilian Portuguese: New Dataset and Multilingual Analysiscited by 45
50 most cited of 58 All 58 (JSON)
Built on by
Citing papers per year: 2022: 3; 2023: 16; 2024: 16; 2025: 9; 2026: 5.
49 papers.
Sort:
By area:
- 2023PaLM 2 Technical Reportcited by 1,162
- 2022Solving math word problems with process- and outcome-based feedbackcited by 901
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 860
- 2023Safe RLHF: Safe Reinforcement Learning from Human Feedbackcited by 656
- 2022Improving alignment of dialogue agents via targeted human judgementscited by 531
- 2023Towards Measuring the Representation of Subjective Global Opinions in Language Modelscited by 437
- 2024When Can LLMs Actually Correct Their Own Mistakes? A Critical Survey of Self-Correction of LLMscited by 240
- 2023Can LLM-Generated Misinformation Be Detected?cited by 177
- 2023The Capacity for Moral Self-Correction in Large Language Modelscited by 173
- 2023Conformal Language Modelingcited by 170
- 2023Auditing large language models: a three-layered approachcited by 137
- 2024Token-level Direct Preference Optimizationcited by 135
37 more
- 2023Evaluating the Social Impact of Generative AI Systems in Systems and Societycited by 92
- 2022Language Generation Models Can Cause Harm: So What Can We Do About It? An Actionable Surveycited by 80
- 2024CoSafe: Evaluating Large Language Model Safety in Multi-Turn Dialogue Coreferencecited by 51
- 2025Multilingual != Multicultural: Evaluating Gaps Between Multilingual Capabilities and Cultural Alignment in LLMscited by 39
- 2024RTP-LX: Can LLMs Evaluate Toxicity in Multilingual Scenarios?cited by 36
- 2024A Robot Walks into a Bar: Can Language Models Serve as Creativity Support Tools for Comedy? An Evaluation of LLMs' Humour Alignment with Comedianscited by 29
- 2023Unveiling Safety Vulnerabilities of Large Language Modelscited by 27
- 2024The Impossibility of Fair LLMscited by 22
- 2023An Evaluation on Large Language Model Outputs: Discourse and Memorizationcited by 20
- 2023Appraising the Potential Uses and Harms of LLMs for Medical Systematic Reviewscited by 18
- 2025Can LLMs Correct Themselves? A Benchmark of Self-Correction in LLMscited by 14
- 2024Generative Echo Chamber? Effects of LLM-Powered Search Systems on Diverse Information Seekingcited by 13
- 2024STAR: SocioTechnical Approach to Red Teaming Language Modelscited by 13
- 2026Shaping capabilities with token-level data filteringcited by 13
- 2023Towards the Scalable Evaluation of Cooperativeness in Language Modelscited by 12
- 2024"Cold, Calculated, and Condescending": How AI Identifies and Explains Ableism Compared to Disabled Peoplecited by 10
- 2025SAGE: A Generic Framework for LLM Safety Evaluationcited by 8
- 2024Imposter.AI: Adversarial Attacks with Hidden Intentions towards Aligned Large Language Modelscited by 7
- 2024Reward-RAG: Enhancing RAG with Reward Driven Supervisioncited by 7
- 2025Taxonomizing Representational Harms using Speech Act Theorycited by 7
- 2025Mitigating Biases in Language Models via Bias Unlearningcited by 6
- 2023Who's Thinking? A Push for Human-Centered Evaluation of LLMs using the XAI Playbookcited by 5
- 2024Laissez-Faire Harms: Algorithmic Biases in Generative Language Modelscited by 5
- 2025Understanding Gender Bias in AI-Generated Product Descriptionscited by 3
- 2025Being Kind Isn't Always Being Safe: Diagnosing Affective Hallucination in LLMscited by 3
- 2026Evaluating Human-AI Safety: A Framework for Measuring Harmful Capability Upliftcited by 3
- 2024GeniL: A Multilingual Dataset on Generalizing Languagecited by 2
- 2025SEALGuard: Safeguarding the Multilingual Conversations in Southeast Asian Languages for LLM Software Systemscited by 2
- 2025Falcon: A Cross-Modal Evaluation Dataset for Comprehensive Safety Perceptioncited by 2
- 2023Operationalising the Definition of General Purpose AI Systems: Assessing Four Approachescited by 1
- 2024Soft-Label Integration for Robust Toxicity Classificationcited by 1
- 2024Ethics Whitepaper: Whitepaper on Ethical Research into Large Language Modelscited by 1
- 2026Food Noise & False Safety: A Systematic Evaluation of How LLMs Fail to Adapt to Eating Disorder Queries with Clinician Feedbackcited by 1
- 2023Apolitical Intelligence? Auditing Delphi's responses on controversial political issues in the UScited by 0
- 2024Evaluating the Propensity of Generative AI for Producing Harmful Disinformation During the 2024 US Election Cyclecited by 0
- 2026AERIC: Anticipatory Hidden-State Monitoring for Implicit Harmful Dialoguecited by 0
- 2026Grounding Text Embeddings in Stakeholder Associationscited by 0
- 2026Food Noise & False Safety: A Systematic Evaluation of How LLMs Fail to Adapt to Eating Disorder Queries with Clinician Feedback1 Jun 2026
- 2026Grounding Text Embeddings in Stakeholder Associations26 May 2026
- 2026AERIC: Anticipatory Hidden-State Monitoring for Implicit Harmful Dialogue13 May 2026
- 2026Evaluating Human-AI Safety: A Framework for Measuring Harmful Capability Uplift6 Mar 2026
- 2026Shaping capabilities with token-level data filtering29 Jan 2026
- 2025Can LLMs Correct Themselves? A Benchmark of Self-Correction in LLMs17 Oct 2025
- 2025Mitigating Biases in Language Models via Bias Unlearning30 Sep 2025
- 2025Falcon: A Cross-Modal Evaluation Dataset for Comprehensive Safety Perception28 Sep 2025
- 2025Being Kind Isn't Always Being Safe: Diagnosing Affective Hallucination in LLMs23 Aug 2025
- 2025SEALGuard: Safeguarding the Multilingual Conversations in Southeast Asian Languages for LLM Software Systems11 Jul 2025
- 2025Understanding Gender Bias in AI-Generated Product Descriptions3 Jun 2025
- 2025SAGE: A Generic Framework for LLM Safety Evaluation28 Apr 2025
37 more
- 2025Taxonomizing Representational Harms using Speech Act Theory1 Apr 2025
- 2025Multilingual != Multicultural: Evaluating Gaps Between Multilingual Capabilities and Cultural Alignment in LLMs23 Feb 2025
- 2024Evaluating the Propensity of Generative AI for Producing Harmful Disinformation During the 2024 US Election Cycle9 Nov 2024
- 2024Soft-Label Integration for Robust Toxicity Classification18 Oct 2024
- 2024Ethics Whitepaper: Whitepaper on Ethical Research into Large Language Models17 Oct 2024
- 2024"Cold, Calculated, and Condescending": How AI Identifies and Explains Ableism Compared to Disabled People4 Oct 2024
- 2024Reward-RAG: Enhancing RAG with Reward Driven Supervision3 Oct 2024
- 2024Imposter.AI: Adversarial Attacks with Hidden Intentions towards Aligned Large Language Models22 Jul 2024
- 2024CoSafe: Evaluating Large Language Model Safety in Multi-Turn Dialogue Coreference25 Jun 2024
- 2024STAR: SocioTechnical Approach to Red Teaming Language Models17 Jun 2024
- 2024When Can LLMs Actually Correct Their Own Mistakes? A Critical Survey of Self-Correction of LLMs3 Jun 2024
- 2024A Robot Walks into a Bar: Can Language Models Serve as Creativity Support Tools for Comedy? An Evaluation of LLMs' Humour Alignment with Comedians31 May 2024
- 2024The Impossibility of Fair LLMs28 May 2024
- 2024RTP-LX: Can LLMs Evaluate Toxicity in Multilingual Scenarios?22 Apr 2024
- 2024Token-level Direct Preference Optimization18 Apr 2024
- 2024Laissez-Faire Harms: Algorithmic Biases in Generative Language Models11 Apr 2024
- 2024GeniL: A Multilingual Dataset on Generalizing Language8 Apr 2024
- 2024Generative Echo Chamber? Effects of LLM-Powered Search Systems on Diverse Information Seeking8 Feb 2024
- 2023Unveiling Safety Vulnerabilities of Large Language Models7 Nov 2023
- 2023Safe RLHF: Safe Reinforcement Learning from Human Feedback19 Oct 2023
- 2023Can LLM-Generated Misinformation Be Detected?25 Sep 2023
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Dataset10 Jul 2023
- 2023Towards Measuring the Representation of Subjective Global Opinions in Language Models28 Jun 2023
- 2023Apolitical Intelligence? Auditing Delphi's responses on controversial political issues in the US22 Jun 2023
- 2023Conformal Language Modeling16 Jun 2023
- 2023Evaluating the Social Impact of Generative AI Systems in Systems and Society9 Jun 2023
- 2023Operationalising the Definition of General Purpose AI Systems: Assessing Four Approaches5 Jun 2023
- 2023Appraising the Potential Uses and Harms of LLMs for Medical Systematic Reviews19 May 2023
- 2023PaLM 2 Technical Report17 May 2023
- 2023An Evaluation on Large Language Model Outputs: Discourse and Memorization17 Apr 2023
- 2023Towards the Scalable Evaluation of Cooperativeness in Language Models16 Mar 2023
- 2023Who's Thinking? A Push for Human-Centered Evaluation of LLMs using the XAI Playbook10 Mar 2023
- 2023Auditing large language models: a three-layered approach16 Feb 2023
- 2023The Capacity for Moral Self-Correction in Large Language Models15 Feb 2023
- 2022Solving math word problems with process- and outcome-based feedback25 Nov 2022
- 2022Language Generation Models Can Cause Harm: So What Can We Do About It? An Actionable Survey14 Oct 2022
- 2022Improving alignment of dialogue agents via targeted human judgements28 Sep 2022
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 860
- 2023Safe RLHF: Safe Reinforcement Learning from Human Feedbackcited by 656
- 2023The Capacity for Moral Self-Correction in Large Language Modelscited by 173
- 2024Token-level Direct Preference Optimizationcited by 135
- 2024Imposter.AI: Adversarial Attacks with Hidden Intentions towards Aligned Large Language Modelscited by 7
- 2025Being Kind Isn't Always Being Safe: Diagnosing Affective Hallucination in LLMscited by 3
- 2025SEALGuard: Safeguarding the Multilingual Conversations in Southeast Asian Languages for LLM Software Systemscited by 2
- 2025Being Kind Isn't Always Being Safe: Diagnosing Affective Hallucination in LLMs23 Aug 2025
- 2025SEALGuard: Safeguarding the Multilingual Conversations in Southeast Asian Languages for LLM Software Systems11 Jul 2025
- 2024Imposter.AI: Adversarial Attacks with Hidden Intentions towards Aligned Large Language Models22 Jul 2024
- 2024Token-level Direct Preference Optimization18 Apr 2024
- 2023Safe RLHF: Safe Reinforcement Learning from Human Feedback19 Oct 2023
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Dataset10 Jul 2023
- 2023The Capacity for Moral Self-Correction in Large Language Models15 Feb 2023
- 2023PaLM 2 Technical Reportcited by 1,162
- 2022Solving math word problems with process- and outcome-based feedbackcited by 901
- 2025Can LLMs Correct Themselves? A Benchmark of Self-Correction in LLMscited by 14
- 2023Who's Thinking? A Push for Human-Centered Evaluation of LLMs using the XAI Playbookcited by 5
- 2025Can LLMs Correct Themselves? A Benchmark of Self-Correction in LLMs17 Oct 2025
- 2023PaLM 2 Technical Report17 May 2023
- 2023Who's Thinking? A Push for Human-Centered Evaluation of LLMs using the XAI Playbook10 Mar 2023
- 2022Solving math word problems with process- and outcome-based feedback25 Nov 2022
- 2024CoSafe: Evaluating Large Language Model Safety in Multi-Turn Dialogue Coreferencecited by 51
- 2024STAR: SocioTechnical Approach to Red Teaming Language Modelscited by 13
- 2025SAGE: A Generic Framework for LLM Safety Evaluationcited by 8
- 2025Mitigating Biases in Language Models via Bias Unlearningcited by 6
- 2025Mitigating Biases in Language Models via Bias Unlearning30 Sep 2025
- 2025SAGE: A Generic Framework for LLM Safety Evaluation28 Apr 2025
- 2024CoSafe: Evaluating Large Language Model Safety in Multi-Turn Dialogue Coreference25 Jun 2024
- 2024STAR: SocioTechnical Approach to Red Teaming Language Models17 Jun 2024
- 2024Reward-RAG: Enhancing RAG with Reward Driven Supervisioncited by 7
- 2024Reward-RAG: Enhancing RAG with Reward Driven Supervision3 Oct 2024
- 2023Towards Measuring the Representation of Subjective Global Opinions in Language Modelscited by 437
- 2024When Can LLMs Actually Correct Their Own Mistakes? A Critical Survey of Self-Correction of LLMscited by 240
- 2023Can LLM-Generated Misinformation Be Detected?cited by 177
- 2023Conformal Language Modelingcited by 170
- 2023Auditing large language models: a three-layered approachcited by 137
- 2023Evaluating the Social Impact of Generative AI Systems in Systems and Societycited by 92
- 2022Language Generation Models Can Cause Harm: So What Can We Do About It? An Actionable Surveycited by 80
- 2025Multilingual != Multicultural: Evaluating Gaps Between Multilingual Capabilities and Cultural Alignment in LLMscited by 39
- 2024RTP-LX: Can LLMs Evaluate Toxicity in Multilingual Scenarios?cited by 36
- 2024A Robot Walks into a Bar: Can Language Models Serve as Creativity Support Tools for Comedy? An Evaluation of LLMs' Humour Alignment with Comedianscited by 29
- 2023Unveiling Safety Vulnerabilities of Large Language Modelscited by 27
- 2024The Impossibility of Fair LLMscited by 22
12 most cited of 32 All 32 (JSON)
- 2026Food Noise & False Safety: A Systematic Evaluation of How LLMs Fail to Adapt to Eating Disorder Queries with Clinician Feedback1 Jun 2026
- 2026Grounding Text Embeddings in Stakeholder Associations26 May 2026
- 2026AERIC: Anticipatory Hidden-State Monitoring for Implicit Harmful Dialogue13 May 2026
- 2026Evaluating Human-AI Safety: A Framework for Measuring Harmful Capability Uplift6 Mar 2026
- 2026Shaping capabilities with token-level data filtering29 Jan 2026
- 2025Falcon: A Cross-Modal Evaluation Dataset for Comprehensive Safety Perception28 Sep 2025
- 2025Understanding Gender Bias in AI-Generated Product Descriptions3 Jun 2025
- 2025Taxonomizing Representational Harms using Speech Act Theory1 Apr 2025
- 2025Multilingual != Multicultural: Evaluating Gaps Between Multilingual Capabilities and Cultural Alignment in LLMs23 Feb 2025
- 2024Evaluating the Propensity of Generative AI for Producing Harmful Disinformation During the 2024 US Election Cycle9 Nov 2024
- 2024Soft-Label Integration for Robust Toxicity Classification18 Oct 2024
- 2024Ethics Whitepaper: Whitepaper on Ethical Research into Large Language Models17 Oct 2024
12 newest of 32 All 32 (JSON)