On the Worst Prompt Performance of Large Language Models
Not on the map. Why?
Abstract (arXiv)
The performance of large language models (LLMs) is acutely sensitive to the phrasing of prompts, which raises significant concerns about their reliability in real-world scenarios. Existing studies often divide prompts into task-level instructions and case-level inputs and primarily focus on evaluating and improving robustness against variations in tasks-level instructions. However, this setup fails to fully address the diversity of real-world user queries and assumes the existence of task-specific datasets. To address these limitations, we introduce RobustAlpacaEval, a new benchmark that consists of semantically equivalent case-level queries and emphasizes the importance of using the worst prompt performance to gauge the lower bound of model performance. Extensive experiments on RobustAlpacaEval with ChatGPT and six open-source LLMs from the Llama, Mistral, and Gemma families uncover substantial variability in model performance; for instance, a difference of 45.48% between the worst and best performance for the Llama-2-70B-chat model, with its worst performance dipping as low as 9.38%. We further illustrate the difficulty in identifying the worst prompt from both model-agnostic and model-dependent perspectives, emphasizing the absence of a shortcut to characterize the worst prompt. We also attempt to enhance the worst prompt performance using existing prompt engineering and prompt consistency methods, but find that their impact is limited. These findings underscore the need to create more resilient LLMs that can maintain high performance across diverse prompts. Data and code are available at https://github.com/cbwbuaa/On-the-Worst-Prompt- Performance-of-LLMs.
Key facts. Cited by 38 papers in the map (data through 14 Oct 2026). Builds on 26 of its 33 references that are in the map. First posted on arXiv 8 Jun 2024.
Builds on
26 of 33 references.
References · 26
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2021Prefix-Tuning: Optimizing Continuous Prompts for Generationcited by 3,915
- 2021The Power of Scale for Parameter-Efficient Prompt Tuningcited by 3,795
- 2022Large Language Models Are Human-Level Prompt Engineerscited by 1,045
- 2024Gemma: Open Models Based on Gemini Research and Technologycited by 916
- 2023Large Language Models as Optimizerscited by 864
- 2023Quantifying Language Models' Sensitivity to Spurious Features in Prompt Design or: How I learned to start worrying about prompt formattingcited by 817
- 2021GPT Understands, Toocited by 716
- 2023Automatic Prompt Optimization with "Gradient Descent" and Beam Searchcited by 653
- 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 518
14 more
- 2023Detecting Pretraining Data from Large Language Modelscited by 387
- 2021Learning How to Ask: Querying LMs with Mixtures of Soft Promptscited by 377
- 2023State of What Art? A Call for Multi-Prompt LLM Evaluationcited by 310
- 2024tinyBenchmarks: evaluating LLMs with fewer examplescited by 310
- 2023PromptRobust: Towards Evaluating the Robustness of Large Language Models on Adversarial Promptscited by 226
- 2022Demystifying Prompts in Language Models via Perplexity Estimationcited by 216
- 2023On the Robustness of ChatGPT: An Adversarial and Out-of-distribution Perspectivecited by 211
- 2022GrIPS: Gradient-free, Edit-based Instruction Search for Prompting Large Language Modelscited by 127
- 2024The Butterfly Effect of Altering Prompts: How Small Changes and Jailbreaks Affect Large Language Model Performancecited by 100
- 2022Prompt Consistency for Zero-Shot Task Generalizationcited by 67
- 2023Evaluating the Zero-shot Robustness of Instruction-tuned Language Modelscited by 66
- 2022Toward Human Readable Prompt Tuning: Kubrick's The Shining is a good movie, and a good prompt too?cited by 49
- 2022Robustness of Learning from Task Instructionscited by 35
- 2023Exploring Lottery Prompts for Pre-trained Language Modelscited by 5
Built on by
Citing papers per year: 2024: 3; 2025: 14; 2026: 21.
38 papers.
Sort:
By area:
- 2026Natural-Language Agent Harnessescited by 61
- 2024ResearchTown: Simulator of Human Research Communitycited by 37
- 2025What Prompts Don't Say: Understanding and Managing Underspecification in LLM Promptscited by 32
- 2024A Survey on the Honesty of Large Language Modelscited by 23
- 2026Brittlebench: Quantifying LLM robustness via prompt sensitivitycited by 21
- 2026EvolveRouter: Co-Evolving Routing and Prompt for Multi-Agent Question Answeringcited by 15
- 2025SCAM: A Real-World Typographic Robustness Evaluation for Multimodal Foundation Modelscited by 13
- 2025Out of Style: RAG's Fragility to Linguistic Variationcited by 11
- 2025More or Less Wrong: A Benchmark for Directional Bias in LLM Comparative Reasoningcited by 7
- 2025Knowledge Integration for Physics-informed Symbolic Regression Using Pre-trained Large Language Modelscited by 7
- 2025Learning the Wrong Lessons: Syntactic-Domain Spurious Correlations in Language Modelscited by 6
- 2024Automated Prompt Engineering for Cost-Effective Code Generation Using Evolutionary Algorithmcited by 5
26 more
- 2025Same Question, Different Words: A Latent Adversarial Framework for Prompt Robustnesscited by 5
- 2026Compared to What? Baselines and Metrics for Counterfactual Promptingcited by 5
- 2025Beyond One-Size-Fits-All: Inversion Learning for Highly Effective NLG Evaluation Promptscited by 4
- 2025ISA-Bench: Benchmarking Instruction Sensitivity for Large Audio Language Modelscited by 3
- 2026Within-Model vs Between-Prompt Variability in Large Language Models for Creative Taskscited by 3
- 2025Investigating LLM Variability in Personalized Conversational Information Retrievalcited by 2
- 2026LPDS: Evaluating LLM Robustness Through Logic-Preserving Difficulty Scalingcited by 2
- 2026Same Patient, Different Words, Different Diagnosis? Evaluating Semantic Stability in Clinical LLMscited by 2
- 2026When Guardrails Look Effective: Construct Validity Failures in LLM Agent Commerce Evaluationcited by 2
- 2025Re-Evaluating Code LLM Benchmarks Under Semantic Mutationcited by 1
- 2025Foundational Design Principles and Patterns for Building Robust and Adaptive GenAI-Native Systemscited by 1
- 2025Type-Compliant Adaptation Cascades: Adapting Programmatic LM Workflows to Datacited by 1
- 2026TATRA: Training-Free Instance-Adaptive Prompting Through Rephrasing and Aggregationcited by 1
- 2026Shaping Schema via Language Representation as the Next Frontier for LLM Intelligence Expandingcited by 1
- 2026Prompt-Model Interaction Reaches the Fixed Points: A deterministic, task-free structural readout -- and the factorizations of it that failedcited by 1
- 2025Developing A Framework to Support Human Evaluation of Bias in Generated Free Response Textcited by 0
- 2026From Abstract to Contextual: What LLMs Still Cannot Do in Mathematicscited by 0
- 2026Disentangling Deception and Hallucination Failures in LLMscited by 0
- 2026Generative AI-assisted Participatory Modeling in Socio-Environmental Planning under Deep Uncertaintycited by 0
- 2026When Large Language Models Fail in Healthcare: Evaluating Sensitivity to Prompt Variationscited by 0
- 2026Soft-Prompt Tuning for Fair and Efficient LLM Benchmark Evaluationcited by 0
- 2026Measuring Behavior Portability in Large Language Modelscited by 0
- 2026Evaluating and Explaining Prompt Sensitivity of LLMs Using Interactionscited by 0
- 2026ENDOPROMPT: Victim-Side Pseudo-References for Utility Degradationcited by 0
- 2026How Much Do LLM-as-a-Judge Design Choices Matter? A Systematic Comparison of Prompt Designs, Rating Scales, and Modelscited by 0
- 2026When Verifiable Counts Depend on Wording: Auditing Wording Robustness in Instruction Followingcited by 0
- 2026When Verifiable Counts Depend on Wording: Auditing Wording Robustness in Instruction Following4 Oct 2026
- 2026How Much Do LLM-as-a-Judge Design Choices Matter? A Systematic Comparison of Prompt Designs, Rating Scales, and Models4 Oct 2026
- 2026ENDOPROMPT: Victim-Side Pseudo-References for Utility Degradation24 Sep 2026
- 2026When Guardrails Look Effective: Construct Validity Failures in LLM Agent Commerce Evaluation1 Sep 2026
- 2026Prompt-Model Interaction Reaches the Fixed Points: A deterministic, task-free structural readout -- and the factorizations of it that failed21 Aug 2026
- 2026Evaluating and Explaining Prompt Sensitivity of LLMs Using Interactions19 Aug 2026
- 2026Measuring Behavior Portability in Large Language Models22 Jun 2026
- 2026Soft-Prompt Tuning for Fair and Efficient LLM Benchmark Evaluation10 Jun 2026
- 2026When Large Language Models Fail in Healthcare: Evaluating Sensitivity to Prompt Variations5 Jun 2026
- 2026Same Patient, Different Words, Different Diagnosis? Evaluating Semantic Stability in Clinical LLMs28 May 2026
- 2026LPDS: Evaluating LLM Robustness Through Logic-Preserving Difficulty Scaling14 May 2026
- 2026Shaping Schema via Language Representation as the Next Frontier for LLM Intelligence Expanding10 May 2026
26 more
- 2026Compared to What? Baselines and Metrics for Counterfactual Prompting1 May 2026
- 2026EvolveRouter: Co-Evolving Routing and Prompt for Multi-Agent Question Answering6 Apr 2026
- 2026Natural-Language Agent Harnesses26 Mar 2026
- 2026Generative AI-assisted Participatory Modeling in Socio-Environmental Planning under Deep Uncertainty17 Mar 2026
- 2026Brittlebench: Quantifying LLM robustness via prompt sensitivity27 Feb 2026
- 2026Disentangling Deception and Hallucination Failures in LLMs16 Feb 2026
- 2026TATRA: Training-Free Instance-Adaptive Prompting Through Rephrasing and Aggregation6 Feb 2026
- 2026From Abstract to Contextual: What LLMs Still Cannot Do in Mathematics30 Jan 2026
- 2026Within-Model vs Between-Prompt Variability in Large Language Models for Creative Tasks29 Jan 2026
- 2025ISA-Bench: Benchmarking Instruction Sensitivity for Large Audio Language Models27 Oct 2025
- 2025Investigating LLM Variability in Personalized Conversational Information Retrieval4 Oct 2025
- 2025Learning the Wrong Lessons: Syntactic-Domain Spurious Correlations in Language Models25 Sep 2025
- 2025Knowledge Integration for Physics-informed Symbolic Regression Using Pre-trained Large Language Models3 Sep 2025
- 2025Type-Compliant Adaptation Cascades: Adapting Programmatic LM Workflows to Data25 Aug 2025
- 2025Foundational Design Principles and Patterns for Building Robust and Adaptive GenAI-Native Systems21 Aug 2025
- 2025Re-Evaluating Code LLM Benchmarks Under Semantic Mutation20 Jun 2025
- 2025More or Less Wrong: A Benchmark for Directional Bias in LLM Comparative Reasoning4 Jun 2025
- 2025What Prompts Don't Say: Understanding and Managing Underspecification in LLM Prompts19 May 2025
- 2025Developing A Framework to Support Human Evaluation of Bias in Generated Free Response Text5 May 2025
- 2025Beyond One-Size-Fits-All: Inversion Learning for Highly Effective NLG Evaluation Prompts29 Apr 2025
- 2025Out of Style: RAG's Fragility to Linguistic Variation11 Apr 2025
- 2025SCAM: A Real-World Typographic Robustness Evaluation for Multimodal Foundation Models7 Apr 2025
- 2025Same Question, Different Words: A Latent Adversarial Framework for Prompt Robustness3 Mar 2025
- 2024ResearchTown: Simulator of Human Research Community23 Dec 2024
- 2024A Survey on the Honesty of Large Language Models27 Sep 2024
- 2024Automated Prompt Engineering for Cost-Effective Code Generation Using Evolutionary Algorithm20 Aug 2024
- 2024A Survey on the Honesty of Large Language Modelscited by 23
- 2024A Survey on the Honesty of Large Language Models27 Sep 2024
- 2025Out of Style: RAG's Fragility to Linguistic Variationcited by 11
- 2025Out of Style: RAG's Fragility to Linguistic Variation11 Apr 2025
- 2026Natural-Language Agent Harnessescited by 61
- 2024ResearchTown: Simulator of Human Research Communitycited by 37
- 2025What Prompts Don't Say: Understanding and Managing Underspecification in LLM Promptscited by 32
- 2026Brittlebench: Quantifying LLM robustness via prompt sensitivitycited by 21
- 2025Knowledge Integration for Physics-informed Symbolic Regression Using Pre-trained Large Language Modelscited by 7
- 2025Learning the Wrong Lessons: Syntactic-Domain Spurious Correlations in Language Modelscited by 6
- 2024Automated Prompt Engineering for Cost-Effective Code Generation Using Evolutionary Algorithmcited by 5
- 2025Same Question, Different Words: A Latent Adversarial Framework for Prompt Robustnesscited by 5
- 2026Compared to What? Baselines and Metrics for Counterfactual Promptingcited by 5
- 2025Beyond One-Size-Fits-All: Inversion Learning for Highly Effective NLG Evaluation Promptscited by 4
- 2025ISA-Bench: Benchmarking Instruction Sensitivity for Large Audio Language Modelscited by 3
- 2026Within-Model vs Between-Prompt Variability in Large Language Models for Creative Taskscited by 3
12 most cited of 30 All 30 (JSON)
- 2026When Verifiable Counts Depend on Wording: Auditing Wording Robustness in Instruction Following4 Oct 2026
- 2026How Much Do LLM-as-a-Judge Design Choices Matter? A Systematic Comparison of Prompt Designs, Rating Scales, and Models4 Oct 2026
- 2026Prompt-Model Interaction Reaches the Fixed Points: A deterministic, task-free structural readout -- and the factorizations of it that failed21 Aug 2026
- 2026Evaluating and Explaining Prompt Sensitivity of LLMs Using Interactions19 Aug 2026
- 2026Measuring Behavior Portability in Large Language Models22 Jun 2026
- 2026Soft-Prompt Tuning for Fair and Efficient LLM Benchmark Evaluation10 Jun 2026
- 2026Same Patient, Different Words, Different Diagnosis? Evaluating Semantic Stability in Clinical LLMs28 May 2026
- 2026LPDS: Evaluating LLM Robustness Through Logic-Preserving Difficulty Scaling14 May 2026
- 2026Shaping Schema via Language Representation as the Next Frontier for LLM Intelligence Expanding10 May 2026
- 2026Compared to What? Baselines and Metrics for Counterfactual Prompting1 May 2026
- 2026Natural-Language Agent Harnesses26 Mar 2026
- 2026Generative AI-assisted Participatory Modeling in Socio-Environmental Planning under Deep Uncertainty17 Mar 2026
12 newest of 30 All 30 (JSON)