Can LLMs Recognize Toxicity? A Structured Investigation Framework and Toxicity Metric
Not on the map. Why?
Abstract (arXiv)
In the pursuit of developing Large Language Models (LLMs) that adhere to societal standards, it is imperative to detect the toxicity in the generated text. The majority of existing toxicity metrics rely on encoder models trained on specific toxicity datasets, which are susceptible to out-of-distribution (OOD) problems and depend on the dataset's definition of toxicity. In this paper, we introduce a robust metric grounded on LLMs to flexibly measure toxicity according to the given definition. We first analyze the toxicity factors, followed by an examination of the intrinsic toxic attributes of LLMs to ascertain their suitability as evaluators. Finally, we evaluate the performance of our metric with detailed analysis. Our empirical results demonstrate outstanding performance in measuring toxicity within verified factors, improving on conventional metrics by 12 points in the F1 score. Our findings also indicate that upstream toxicity significantly influences downstream metrics, suggesting that LLMs are unsuitable for toxicity evaluations within unverified factors.
Key facts. Cited by 23 papers in the map (data through 7 Oct 2026). Builds on 50 of its 81 references that are in the map. First posted on arXiv 10 Feb 2024.
Builds on
50 of 81 references.
References · 50
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,049
- 2019BERTScore: Evaluating Text Generation with BERTcited by 5,462
- 2022Large Language Models are Zero-Shot Reasonerscited by 4,323
- 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,388
- 2023G-Eval: NLG Evaluation using GPT-4 with Better Human Alignmentcited by 2,205
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,106
- 2020COMET: A Neural Framework for MT Evaluationcited by 1,024
- 2023Quantifying Language Models' Sensitivity to Spurious Features in Prompt Design or: How I learned to start worrying about prompt formattingcited by 778
- 2021BARTScore: Evaluating Generated Text as Text Generationcited by 719
38 more
- 2020Aligning AI With Shared Human Valuescited by 706
- 2021BBQ: A Hand-Built Bias Benchmark for Question Answeringcited by 683
- 2021The FLORES-101 Evaluation Benchmark for Low-Resource and Multilingual Machine Translationcited by 556
- 2020Null It Out: Guarding Protected Attributes by Iterative Nullspace Projectioncited by 442
- 2022ToxiGen: A Large-Scale Machine-Generated Dataset for Adversarial and Implicit Hate Speech Detectioncited by 419
- 2023Large Language Models Are State-of-the-Art Evaluators of Translation Qualitycited by 416
- 2019Nuanced Metrics for Measuring Unintended Bias with Real Data for Text Classificationcited by 396
- 2019Social Bias Frames: Reasoning about Social and Power Implications of Languagecited by 377
- 2023Orca: Progressive Learning from Complex Explanation Traces of GPT-4cited by 369
- 2023Toxicity in ChatGPT: Analyzing Persona-assigned Language Modelscited by 356
- 2019Lipstick on a Pig: Debiasing Methods Cover up Systematic Gender Biases in Word Embeddings But do not Remove Themcited by 268
- 2023From Pretraining Data to Language Models to Downstream Tasks: Tracking the Trails of Political Biases Leading to Unfair NLP Modelscited by 257
- 2020Measuring and Reducing Gendered Correlations in Pre-trained Modelscited by 222
- 2022On Second Thought, Let's Not Think Step by Step! Bias and Toxicity in Zero-Shot Reasoningcited by 191
- 2023Do-Not-Answer: A Dataset for Evaluating Safeguards in LLMscited by 176
- 2022"I'm sorry to hear that": Finding New Biases in Language Models with a Holistic Descriptor Datasetcited by 160
- 2022Who is GPT-3? An Exploration of Personality, Values and Demographicscited by 112
- 2022ProsocialDialog: A Prosocial Backbone for Conversational Agentscited by 109
- 2021Sustainable Modular Debiasing of Language Modelscited by 98
- 2021Evaluating the Robustness of Neural Language Models to Input Perturbationscited by 87
- 2022Entropy-based Attention Regularization Frees Unintended Bias Mitigation from Listscited by 54
- 2021Sample Selection for Fair and Robust Trainingcited by 48
- 2022BERTScore is Unfair: On Social Bias in Language Model-Based Metrics for Text Generationcited by 48
- 2022Critic-Guided Decoding for Controlled Text Generationcited by 45
- 2023On the Challenges of Using Black-Box APIs for Toxicity Evaluation in Researchcited by 44
- 2022Probing Classifiers are Unreliable for Concept Removal and Detectioncited by 40
- 2021UMIC: An Unreferenced Metric for Image Captioning via Contrastive Learningcited by 37
- 2022Choose Your Lenses: Flaws in Gender Bias Evaluationcited by 29
- 2021Evaluating Gender Bias in Natural Language Inferencecited by 27
- 2022How Hate Speech Varies by Target Identity: A Computational Analysiscited by 23
- 2022Causes and Cures for Interference in Multilingual Translationcited by 23
- 2023Mitigating Biases for Instruction-following Language Models via Bias Neurons Eliminationcited by 23
- 2020Nurse is Closer to Woman than Surgeon? Mitigating Gender-Biased Proximities in Word Embeddingscited by 20
- 2022Fair Bayes-Optimal Classifiers Under Predictive Paritycited by 16
- 2023SQuARe: A Large-Scale Dataset of Sensitive Questions and Acceptable Responses Created Through Human-Machine Collaborationcited by 13
- 2023Target-Agnostic Gender-Aware Contrastive Learning for Mitigating Bias in Multilingual Machine Translationcited by 10
- 2023Debiasing should be Good and Bad: Measuring the Consistency of Debiasing Techniques in Language Modelscited by 7
- 2023Three Ways of Using Large Language Models to Evaluate Chatcited by 2
Built on by
Citing papers per year: 2024: 3; 2025: 11; 2026: 9.
23 papers.
Sort:
By area:
- 2024VLind-Bench: Measuring Language Priors in Large Vision-Language Modelscited by 44
- 2025Toward Generalizable Evaluation in the LLM Era: A Survey Beyond Benchmarkscited by 26
- 2024Mitigating Hallucinations in Large Vision-Language Models via Summary-Guided Decodingcited by 21
- 2024SWITCH: Studying with Teacher for Knowledge Distillation of Large Language Modelscited by 8
- 2025Breaking Bad Tokens: Detoxification of LLMs Using Sparse Autoencoderscited by 8
- 2025Unified Game Moderation: Soft-Prompting and LLM-Assisted Label Transfer for Resource-Efficient Toxicity Detectioncited by 5
- 2025Harmful Prompt Laundering: Jailbreaking LLMs with Abductive Styles and Symbolic Encodingcited by 5
- 2025Breaking mBad! Supervised Fine-tuning for Cross-Lingual Detoxificationcited by 3
- 2025ToxiFrench: Benchmarking and Enhancing Language Models via CoT Fine-Tuning for French Toxicity Detectioncited by 3
- 2025Toxicity in Online Platforms and AI Systems: A Survey of Needs, Challenges, Mitigations, and Future Directionscited by 3
- 2025Argument-Based Consistency in Toxicity Explanations of LLMscited by 2
- 2026When to Invoke: Refining LLM Fairness with Toxicity Assessmentcited by 2
11 more
- 2026Safety is Contextual, LLM-Judges Are Not: Navigating the Rigid Priors of Evaluatorscited by 2
- 2025Towards Ethical Multi-Agent Systems of Large Language Models: A Mechanistic Interpretability Perspectivecited by 1
- 2025Stated Preference for Interaction and Continued Engagement (SPICE): Evaluating an LLM's Willingness to Re-engage in Conversationcited by 0
- 2025The Hidden Bias: A Study on Explicit and Implicit Political Stereotypes in Large Language Modelscited by 0
- 2026Detoxification for LLM: From Dataset Itselfcited by 0
- 2026Toxicity in Twitch Chats: An LLM-Based Analysis Across Gaming Communitiescited by 0
- 2026Where Does Toxicity Live? Mechanistic Localization and Targeted Suppression in Language Modelscited by 0
- 2026What the Eyes See, the LLMs Miss: Exploiting Human Perception for Adversarial Text Attackscited by 0
- 2026Evaluating Second-Order Bias of LLMs Through Epistemic Entitlementcited by 0
- 2026A Survey of Toxicity Detection and Mitigation Strategies for Multilingual Language Modelscited by 0
- 2026AI Should Facilitate Democratic Deliberation at Scalecited by 0
- 2026AI Should Facilitate Democratic Deliberation at Scale17 Sep 2026
- 2026A Survey of Toxicity Detection and Mitigation Strategies for Multilingual Language Models24 Jun 2026
- 2026Evaluating Second-Order Bias of LLMs Through Epistemic Entitlement16 Jun 2026
- 2026What the Eyes See, the LLMs Miss: Exploiting Human Perception for Adversarial Text Attacks8 Jun 2026
- 2026Safety is Contextual, LLM-Judges Are Not: Navigating the Rigid Priors of Evaluators5 Jun 2026
- 2026Where Does Toxicity Live? Mechanistic Localization and Targeted Suppression in Language Models27 May 2026
- 2026Toxicity in Twitch Chats: An LLM-Based Analysis Across Gaming Communities18 May 2026
- 2026Detoxification for LLM: From Dataset Itself21 Apr 2026
- 2026When to Invoke: Refining LLM Fairness with Toxicity Assessment14 Jan 2026
- 2025Towards Ethical Multi-Agent Systems of Large Language Models: A Mechanistic Interpretability Perspective4 Dec 2025
- 2025The Hidden Bias: A Study on Explicit and Implicit Political Stereotypes in Large Language Models9 Oct 2025
- 2025Toxicity in Online Platforms and AI Systems: A Survey of Needs, Challenges, Mitigations, and Future Directions29 Sep 2025
11 more
- 2025Harmful Prompt Laundering: Jailbreaking LLMs with Abductive Styles and Symbolic Encoding13 Sep 2025
- 2025Stated Preference for Interaction and Continued Engagement (SPICE): Evaluating an LLM's Willingness to Re-engage in Conversation10 Sep 2025
- 2025ToxiFrench: Benchmarking and Enhancing Language Models via CoT Fine-Tuning for French Toxicity Detection15 Aug 2025
- 2025Argument-Based Consistency in Toxicity Explanations of LLMs23 Jun 2025
- 2025Unified Game Moderation: Soft-Prompting and LLM-Assisted Label Transfer for Resource-Efficient Toxicity Detection1 Jun 2025
- 2025Breaking mBad! Supervised Fine-tuning for Cross-Lingual Detoxification22 May 2025
- 2025Breaking Bad Tokens: Detoxification of LLMs Using Sparse Autoencoders20 May 2025
- 2025Toward Generalizable Evaluation in the LLM Era: A Survey Beyond Benchmarks26 Apr 2025
- 2024SWITCH: Studying with Teacher for Knowledge Distillation of Large Language Models25 Oct 2024
- 2024Mitigating Hallucinations in Large Vision-Language Models via Summary-Guided Decoding17 Oct 2024
- 2024VLind-Bench: Measuring Language Priors in Large Vision-Language Models13 Jun 2024
- 2025Harmful Prompt Laundering: Jailbreaking LLMs with Abductive Styles and Symbolic Encodingcited by 5
- 2026Where Does Toxicity Live? Mechanistic Localization and Targeted Suppression in Language Modelscited by 0
- 2026A Survey of Toxicity Detection and Mitigation Strategies for Multilingual Language Modelscited by 0
- 2026A Survey of Toxicity Detection and Mitigation Strategies for Multilingual Language Models24 Jun 2026
- 2026Where Does Toxicity Live? Mechanistic Localization and Targeted Suppression in Language Models27 May 2026
- 2025Harmful Prompt Laundering: Jailbreaking LLMs with Abductive Styles and Symbolic Encoding13 Sep 2025
- 2025Toward Generalizable Evaluation in the LLM Era: A Survey Beyond Benchmarkscited by 26
- 2024SWITCH: Studying with Teacher for Knowledge Distillation of Large Language Modelscited by 8
- 2025Breaking Bad Tokens: Detoxification of LLMs Using Sparse Autoencoderscited by 8
- 2025Unified Game Moderation: Soft-Prompting and LLM-Assisted Label Transfer for Resource-Efficient Toxicity Detectioncited by 5
- 2025Breaking mBad! Supervised Fine-tuning for Cross-Lingual Detoxificationcited by 3
- 2025ToxiFrench: Benchmarking and Enhancing Language Models via CoT Fine-Tuning for French Toxicity Detectioncited by 3
- 2025Toxicity in Online Platforms and AI Systems: A Survey of Needs, Challenges, Mitigations, and Future Directionscited by 3
- 2025Argument-Based Consistency in Toxicity Explanations of LLMscited by 2
- 2026When to Invoke: Refining LLM Fairness with Toxicity Assessmentcited by 2
- 2026Safety is Contextual, LLM-Judges Are Not: Navigating the Rigid Priors of Evaluatorscited by 2
- 2025Stated Preference for Interaction and Continued Engagement (SPICE): Evaluating an LLM's Willingness to Re-engage in Conversationcited by 0
- 2025The Hidden Bias: A Study on Explicit and Implicit Political Stereotypes in Large Language Modelscited by 0
12 most cited of 17 All 17 (JSON)
- 2026AI Should Facilitate Democratic Deliberation at Scale17 Sep 2026
- 2026Evaluating Second-Order Bias of LLMs Through Epistemic Entitlement16 Jun 2026
- 2026What the Eyes See, the LLMs Miss: Exploiting Human Perception for Adversarial Text Attacks8 Jun 2026
- 2026Safety is Contextual, LLM-Judges Are Not: Navigating the Rigid Priors of Evaluators5 Jun 2026
- 2026Toxicity in Twitch Chats: An LLM-Based Analysis Across Gaming Communities18 May 2026
- 2026Detoxification for LLM: From Dataset Itself21 Apr 2026
- 2026When to Invoke: Refining LLM Fairness with Toxicity Assessment14 Jan 2026
- 2025The Hidden Bias: A Study on Explicit and Implicit Political Stereotypes in Large Language Models9 Oct 2025
- 2025Toxicity in Online Platforms and AI Systems: A Survey of Needs, Challenges, Mitigations, and Future Directions29 Sep 2025
- 2025Stated Preference for Interaction and Continued Engagement (SPICE): Evaluating an LLM's Willingness to Re-engage in Conversation10 Sep 2025
- 2025ToxiFrench: Benchmarking and Enhancing Language Models via CoT Fine-Tuning for French Toxicity Detection15 Aug 2025
- 2025Argument-Based Consistency in Toxicity Explanations of LLMs23 Jun 2025
12 newest of 17 All 17 (JSON)