ProSA: Assessing and Understanding the Prompt Sensitivity of LLMs
Not on the map. Why?
Abstract (arXiv)
Large language models (LLMs) have demonstrated impressive capabilities across various tasks, but their performance is highly sensitive to the prompts utilized. This variability poses challenges for accurate assessment and user satisfaction. Current research frequently overlooks instance-level prompt variations and their implications on subjective evaluations. To address these shortcomings, we introduce ProSA, a framework designed to evaluate and comprehend prompt sensitivity in LLMs. ProSA incorporates a novel sensitivity metric, PromptSensiScore, and leverages decoding confidence to elucidate underlying mechanisms. Our extensive study, spanning multiple tasks, uncovers that prompt sensitivity fluctuates across datasets and models, with larger models exhibiting enhanced robustness. We observe that few-shot examples can alleviate this sensitivity issue, and subjective evaluations are also susceptible to prompt sensitivities, particularly in complex, reasoning-oriented tasks. Furthermore, our findings indicate that higher model confidence correlates with increased prompt robustness. We believe this work will serve as a helpful tool in studying prompt sensitivity of LLMs. The project is released at: https://github.com/open-compass/ProSA .
Key facts. Cited by 145 papers in the map (data through 7 Oct 2026). Builds on 13 of its 24 references that are in the map. First posted on arXiv 16 Oct 2024.
Builds on
13 of 24 references.
References · 13
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2021Training Verifiers to Solve Math Word Problemscited by 9,743
- 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,049
- 2019BERTScore: Evaluating Text Generation with BERTcited by 5,462
- 2021Measuring Mathematical Problem Solving With the MATH Datasetcited by 5,203
- 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,710
- 2021Program Synthesis with Large Language Modelscited by 3,509
- 2018CommonsenseQA: A Question Answering Challenge Targeting Commonsense Knowledgecited by 1,793
- 2024Length-Controlled AlpacaEval: A Simple Way to Debias Automatic Evaluatorscited by 865
- 2023Quantifying Language Models' Sensitivity to Spurious Features in Prompt Design or: How I learned to start worrying about prompt formattingcited by 778
- 2021Recent Advances in Natural Language Processing via Large Pre-Trained Language Models: A Surveycited by 457
- 2023State of What Art? A Call for Multi-Prompt LLM Evaluationcited by 299
1 more
- 2023Don't Make Your LLM an Evaluation Benchmark Cheatercited by 194
Built on by
Citing papers per year: 2024: 2; 2025: 71; 2026: 72.
145 papers.
Sort:
By area:
- 2025Measuring what Matters: Construct Validity in Large Language Model Benchmarkscited by 102
- 2024Are Your LLMs Capable of Stable Reasoning?cited by 65
- 2025DOVE: A Large-Scale Multi-Dimensional Predictions Dataset Towards Meaningful LLM Evaluationcited by 21
- 2026Brittlebench: Quantifying LLM robustness via prompt sensitivitycited by 19
- 2025Challenging the Evaluator: LLM Sycophancy Under User Rebuttalcited by 18
- 2025Beyond Prompt Content: Enhancing LLM Performance via Content-Format Integrated Prompt Optimizationcited by 15
- 2025Persona-Augmented Benchmarking: Evaluating LLMs Across Diverse Writing Stylescited by 15
- 2025Promptception: How Sensitive Are Large Multimodal Models to Prompts?cited by 13
- 2025Inherent and emergent liability issues in LLM-based agentic systems: a principal-agent perspectivecited by 12
- 2026On Randomness in Agentic Evalscited by 12
- 2025Triangulating LLM Progress through Benchmarks, Games, and Cognitive Testscited by 11
- 2025Quantifying and Improving the Robustness of Retrieval-Augmented Language Models Against Spurious Features in Grounding Datacited by 10
38 more
- 2025ReliableEval: A Recipe for Stochastic LLM Evaluation via Method of Momentscited by 10
- 2025When Punctuation Matters: A Large-Scale Comparison of Prompt Robustness Methods for LLMscited by 10
- 2025Culture is Everywhere: A Call for Intentionally Cultural Evaluationcited by 10
- 2025Silenced Biases: The Dark Side LLMs Learned to Refusecited by 10
- 2026JudgeSense: A Benchmark for Prompt Sensitivity in LLM-as-a-Judge Systemscited by 10
- 2025PRL: Prompts from Reinforcement Learningcited by 9
- 2026Beyond Resolution Rates: Behavioral Drivers of Coding Agent Success and Failurecited by 9
- 2025Exploring the Potential for Large Language Models to Demonstrate Rational Probabilistic Beliefscited by 8
- 2025Quantized but Deceptive? A Multi-Dimensional Truthfulness Evaluation of Quantized LLMscited by 8
- 2025CoBRA: Programming Cognitive Bias in Social Agents Using Classic Social Science Experimentscited by 8
- 2025Meaningless Tokens, Meaningful Gains: How Activation Shifts Enhance LLM Reasoningcited by 8
- 2026The Fragility Of Moral Judgment In Large Language Modelscited by 8
- 2025Do We Know What LLMs Don't Know? A Study of Consistency in Knowledge Probingcited by 7
- 2025Knowledge Integration for Physics-informed Symbolic Regression Using Pre-trained Large Language Modelscited by 7
- 2026Thought Virus: Viral Misalignment via Subliminal Prompting in Multi-Agent Systemscited by 7
- 2025Keeping Medical AI Healthy and Trustworthy: A Review of Detection and Correction Methods for System Degradationcited by 6
- 2026ErrorMap and ErrorAtlas: Charting the Failure Landscape of Large Language Modelscited by 6
- 2025Limits of LLM Text Detectors in Educationcited by 5
- 2025Conflict-Aware Soft Prompting for Retrieval-Augmented Generationcited by 5
- 2025If We May De-Presuppose: Robustly Verifying Claims through Presupposition-Free Question Decompositioncited by 5
- 2025Human Preferences in Large Language Model Latent Space: A Technical Analysis on the Reliability of Synthetic Data in Voting Outcome Predictioncited by 4
- 2025RAGTrace: Understanding and Refining Retrieval-Generation Dynamics in Retrieval-Augmented Generationcited by 4
- 2025Talk Less, Call Right: Enhancing Role-Play LLM Agents with Automatic Prompt Optimization and Role Promptingcited by 4
- 2025Prompting from the bench: Large-scale pretraining is not sufficient to prepare LLMs for ordinary meaning analysiscited by 4
- 2025EvalCards: A Framework for Standardized Evaluation Reportingcited by 4
- 2025GREATERPROMPT: A Unified, Customizable, and High-Performing Open-Source Toolkit for Prompt Optimizationcited by 3
- 2025Leveraging LLM Inconsistency to Boost Pass@k Performancecited by 3
- 2025A Multimodal, Multilingual, and Multidimensional Pipeline for Fine-grained Crowdsourcing Earthquake Damage Evaluationcited by 3
- 2025A Comprehensive Review on Harnessing Large Language Models to Overcome Recommender System Challengescited by 3
- 2025AHAMask: Reliable Task Specification for Large Audio Language Models without Instructionscited by 3
- 2025Representing LLMs in Prompt Semantic Task Spacecited by 3
- 2025Lita: Light Agent Uncovers the Agentic Coding Capabilities of LLMscited by 3
- 2025ISA-Bench: Benchmarking Instruction Sensitivity for Large Audio Language Modelscited by 3
- 2026Calibration Is Not Enough: Evaluating Confidence Estimation Under Language Variationscited by 3
- 2026PSF-Med: Measuring and Explaining Paraphrase Sensitivity in Medical Vision Language Modelscited by 3
- 2025Choices Speak Louder than Questionscited by 2
- 2025Weaker LLMs' Opinions Also Matter: Mixture of Opinions Enhances LLM's Mathematical Reasoningcited by 2
- 2025Is Your Model Fairly Certain? Uncertainty-Aware Fairness Evaluation for LLMscited by 2
50 most cited of 145 All 145 (JSON)
- 2026Generalization Is Stability, Not Accuracy: Multi-Axis Evaluation of LLMs1 Oct 2026
- 2026Framing the Narrative: Ideological Mimicry in Large Language Models29 Sep 2026
- 2026Hyper Algorithm Design Agent: Evolving Learnable Optimizer from Zero28 Sep 2026
- 2026Blaming Across the Aisle: Political Contrasting and Blame Attribution in the Danish Parliament22 Sep 2026
- 2026Necessary or Sufficient? Evaluating LLM Explanations With Behavioural Evidence4 Sep 2026
- 2026Prompt-Robust Language Models: Which Training Strategies Work?1 Sep 2026
- 2026Beyond the Payload: How User Invocation Shapes Coding Agent Vulnerability to Repository Poisoning31 Aug 2026
- 2026PCFBench: A Diagnostic Benchmark for Product Carbon Footprint Estimation27 Aug 2026
- 2026Evaluating and Explaining Prompt Sensitivity of LLMs Using Interactions19 Aug 2026
- 2026Interpretable Humans, Alien LLMs: Expert Analysis of Latent Structures in Assessment Responses18 Aug 2026
- 2026Do Assessment Instruments Measure the Same Thing for Humans and LLMs? A Latent Structure Analysis16 Aug 2026
- 2026Do Influence Tactics Matter? Investigating Prompt Framing Effects in LLM Code Generation11 Aug 2026
38 more
- 2026Isotropy Cliffs: The Geometric Signature of Decision-Making in Large Language Models1 Aug 2026
- 2026Relation Geometry in Semantic Space of Language Models29 Jul 2026
- 2026Reference-Free Evaluation of Reasoning in Open-Ended Question Answering22 Jul 2026
- 2026Hallucinations in LLMs: A Lifecycle-Based Survey of Causes, Detection, Mitigation, and Prevention20 Jul 2026
- 2026From Plausible to Actionable: A Position on LLM Self-Explanations17 Jul 2026
- 2026The Illusion of Robustness: Aggregate Accuracy Hides Prediction Flips under Task-Irrelevant Context14 Jul 2026
- 2026Imprompt: A Language Framework for Prompt Programming13 Jul 2026
- 2026Cheap Code, Costly Judgment: A Case Study on Governable Agentic Software Engineering1 Jul 2026
- 2026Beyond Surface Forms: A Comprehensive, Mechanism-Oriented Taxonomy of Indirect Linguistic Encoding for LLM-Based Coded Language Detection25 Jun 2026
- 2026Measuring Behavior Portability in Large Language Models22 Jun 2026
- 2026AuAu: A Benchmark for Auditing Authoritarian Alignment in Large Language Models15 Jun 2026
- 2026Emergent retokenization symmetry in large language models: phenomenology and applications14 Jun 2026
- 2026Same Facts, Different Updates: Inference Setup Shapes LLM Behavior in Medical Allocation10 Jun 2026
- 2026When Large Language Models Fail in Healthcare: Evaluating Sensitivity to Prompt Variations5 Jun 2026
- 2026Discourse-Role Labels as Presentation-Time Variables for Context Use in Language Models2 Jun 2026
- 2026Toxic HallucinAItions: Perturbing Prompts and Tracing LLM Circuits29 May 2026
- 2026Same Patient, Different Words, Different Diagnosis? Evaluating Semantic Stability in Clinical LLMs28 May 2026
- 2026Spurious Prompts: Can Irrelevant Prompts Steer Large Language Models?28 May 2026
- 2026Reflective Prompt Tuning through Language Model Function-Calling20 May 2026
- 2026TextReg: Mitigating Prompt Distributional Overfitting via Regularized Text-Space Optimization20 May 2026
- 2026LLMs as annotators of credibility assessment in Danish asylum decisions: evaluating classification performance and errors beyond aggregated metrics13 May 2026
- 2026Instructions Shape Production of Language, not Processing11 May 2026
- 2026AI Native Asset Intelligence9 May 2026
- 2026Coordinates of Capability: A Unified MTMM-Geometric Framework for LLM Evaluation8 May 2026
- 2026The Translation Tax Is Not a Scalar: A Counterfactual Audit of English-Source Cue Inheritance in Chinese Multilingual Benchmarks8 May 2026
- 2026A Reproducible Optimisation Protocol for Calibrating Prompt-Based Large Language Model Workflows in Evidence Synthesis7 May 2026
- 2026Measuring Evaluation-Context Divergence in Open-Weight LLMs: A Paired-Prompt Protocol with Pilot Evidence of Alignment-Pipeline-Specific Heterogeneity7 May 2026
- 2026BIT.UA-AAUBS at ArchEHR-QA 2026: Evaluating Open-Source and Proprietary LLMs via Prompting in Low-Resource QA5 May 2026
- 2026Semantically Enriching Investor Micro-blogs for Opinion-Aware Emotion Analysis: A Practical Approach4 May 2026
- 2026Are LLMs More Skeptical of Entertainment News?3 May 2026
- 2026Prompt-Induced Score Variance in Zero-Shot Binary Vision-Language Safety Classification1 May 2026
- 2026Green Shielding: A User-Centric Approach Towards Trustworthy AI27 Apr 2026
- 2026JudgeSense: A Benchmark for Prompt Sensitivity in LLM-as-a-Judge Systems26 Apr 2026
- 2026Fine-tuning vs. In-context Learning in Large Language Models: A Formal Language Learning Perspective25 Apr 2026
- 2026Voice Under Revision: Large Language Models and the Normalization of Personal Narrative24 Apr 2026
- 2026Understanding the Prompt Sensitivity20 Apr 2026
- 2026Agentic Insight Generation in VSM Simulations14 Apr 2026
- 2026Beyond Resolution Rates: Behavioral Drivers of Coding Agent Success and Failure2 Apr 2026
50 newest of 145 All 145 (JSON)
- 2025Inherent and emergent liability issues in LLM-based agentic systems: a principal-agent perspectivecited by 12
- 2026On Randomness in Agentic Evalscited by 12
- 2025CoBRA: Programming Cognitive Bias in Social Agents Using Classic Social Science Experimentscited by 8
- 2025Talk Less, Call Right: Enhancing Role-Play LLM Agents with Automatic Prompt Optimization and Role Promptingcited by 4
- 2025Lita: Light Agent Uncovers the Agentic Coding Capabilities of LLMscited by 3
- 2025MADS: Multi-Agent Dialogue Simulation for Diverse Persuasion Data Generationcited by 2
- 2026Cheap Code, Costly Judgment: A Case Study on Governable Agentic Software Engineeringcited by 2
- 2026Reflective Prompt Tuning through Language Model Function-Callingcited by 1
- 2025FlockVote: LLM-Empowered Agent-Based Modeling for Simulating U.S. Presidential Electionscited by 0
- 2026Agentic Insight Generation in VSM Simulationscited by 0
- 2026Beyond the Payload: How User Invocation Shapes Coding Agent Vulnerability to Repository Poisoningcited by 0
- 2026Beyond the Payload: How User Invocation Shapes Coding Agent Vulnerability to Repository Poisoning31 Aug 2026
- 2026Cheap Code, Costly Judgment: A Case Study on Governable Agentic Software Engineering1 Jul 2026
- 2026Reflective Prompt Tuning through Language Model Function-Calling20 May 2026
- 2026Agentic Insight Generation in VSM Simulations14 Apr 2026
- 2026On Randomness in Agentic Evals6 Feb 2026
- 2025FlockVote: LLM-Empowered Agent-Based Modeling for Simulating U.S. Presidential Elections27 Nov 2025
- 2025MADS: Multi-Agent Dialogue Simulation for Diverse Persuasion Data Generation30 Sep 2025
- 2025Lita: Light Agent Uncovers the Agentic Coding Capabilities of LLMs30 Sep 2025
- 2025CoBRA: Programming Cognitive Bias in Social Agents Using Classic Social Science Experiments16 Sep 2025
- 2025Talk Less, Call Right: Enhancing Role-Play LLM Agents with Automatic Prompt Optimization and Role Prompting30 Aug 2025
- 2025Inherent and emergent liability issues in LLM-based agentic systems: a principal-agent perspective4 Apr 2025
- 2024Are Your LLMs Capable of Stable Reasoning?cited by 65
- 2026Beyond Resolution Rates: Behavioral Drivers of Coding Agent Success and Failurecited by 9
- 2025Meaningless Tokens, Meaningful Gains: How Activation Shifts Enhance LLM Reasoningcited by 8
- 2026Thought Virus: Viral Misalignment via Subliminal Prompting in Multi-Agent Systemscited by 7
- 2025Weaker LLMs' Opinions Also Matter: Mixture of Opinions Enhances LLM's Mathematical Reasoningcited by 2
- 2026Reference-Free Evaluation of Reasoning in Open-Ended Question Answeringcited by 0
- 2026Reference-Free Evaluation of Reasoning in Open-Ended Question Answering22 Jul 2026
- 2026Beyond Resolution Rates: Behavioral Drivers of Coding Agent Success and Failure2 Apr 2026
- 2026Thought Virus: Viral Misalignment via Subliminal Prompting in Multi-Agent Systems23 Feb 2026
- 2025Meaningless Tokens, Meaningful Gains: How Activation Shifts Enhance LLM Reasoning1 Oct 2025
- 2025Weaker LLMs' Opinions Also Matter: Mixture of Opinions Enhances LLM's Mathematical Reasoning26 Feb 2025
- 2024Are Your LLMs Capable of Stable Reasoning?17 Dec 2024
- 2025Promptception: How Sensitive Are Large Multimodal Models to Prompts?cited by 13
- 2026PSF-Med: Measuring and Explaining Paraphrase Sensitivity in Medical Vision Language Modelscited by 3
- 2024Investigating the Scaling Effect of Instruction Templates for Training Multimodal Language Modelcited by 1
- 2025Vision Language Models versus Machine Learning Models Performance on Polyp Detection and Classification in Colonoscopy Imagescited by 0
- 2025Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Modelscited by 0
- 2026Prompt-Induced Score Variance in Zero-Shot Binary Vision-Language Safety Classificationcited by 0
- 2026Prompt-Induced Score Variance in Zero-Shot Binary Vision-Language Safety Classification1 May 2026
- 2026PSF-Med: Measuring and Explaining Paraphrase Sensitivity in Medical Vision Language Models24 Feb 2026
- 2025Promptception: How Sensitive Are Large Multimodal Models to Prompts?4 Sep 2025
- 2025Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models18 Jul 2025
- 2025Vision Language Models versus Machine Learning Models Performance on Polyp Detection and Classification in Colonoscopy Images27 Mar 2025
- 2024Investigating the Scaling Effect of Instruction Templates for Training Multimodal Language Model11 Dec 2024
- 2025Quantifying and Improving the Robustness of Retrieval-Augmented Language Models Against Spurious Features in Grounding Datacited by 10
- 2025Conflict-Aware Soft Prompting for Retrieval-Augmented Generationcited by 5
- 2025RAGTrace: Understanding and Refining Retrieval-Generation Dynamics in Retrieval-Augmented Generationcited by 4
- 2025Retrieval-Augmented Generation for Natural Language Art Provenance Searches in the Getty Provenance Indexcited by 0
- 2026DIVERGE: Diversity-Enhanced RAG for Open-Ended Information Seekingcited by 0
- 2026DIVERGE: Diversity-Enhanced RAG for Open-Ended Information Seeking30 Jan 2026
- 2025Retrieval-Augmented Generation for Natural Language Art Provenance Searches in the Getty Provenance Index26 Aug 2025
- 2025Conflict-Aware Soft Prompting for Retrieval-Augmented Generation21 Aug 2025
- 2025RAGTrace: Understanding and Refining Retrieval-Generation Dynamics in Retrieval-Augmented Generation8 Aug 2025
- 2025Quantifying and Improving the Robustness of Retrieval-Augmented Language Models Against Spurious Features in Grounding Data7 Mar 2025
- 2025Culture is Everywhere: A Call for Intentionally Cultural Evaluationcited by 10
- 2025Silenced Biases: The Dark Side LLMs Learned to Refusecited by 10
- 2025CIE: Controlling Language Model Text Generations Using Continuous Signalscited by 1
- 2026MOSAIC: Composable Safety Alignment with Modular Control Tokenscited by 1
- 2026MOSAIC: Composable Safety Alignment with Modular Control Tokens17 Mar 2026
- 2025Silenced Biases: The Dark Side LLMs Learned to Refuse5 Nov 2025
- 2025Culture is Everywhere: A Call for Intentionally Cultural Evaluation1 Sep 2025
- 2025CIE: Controlling Language Model Text Generations Using Continuous Signals19 May 2025
- 2025Measuring what Matters: Construct Validity in Large Language Model Benchmarkscited by 102
- 2025DOVE: A Large-Scale Multi-Dimensional Predictions Dataset Towards Meaningful LLM Evaluationcited by 21
- 2026Brittlebench: Quantifying LLM robustness via prompt sensitivitycited by 19
- 2025Challenging the Evaluator: LLM Sycophancy Under User Rebuttalcited by 18
- 2025Beyond Prompt Content: Enhancing LLM Performance via Content-Format Integrated Prompt Optimizationcited by 15
- 2025Persona-Augmented Benchmarking: Evaluating LLMs Across Diverse Writing Stylescited by 15
- 2025Triangulating LLM Progress through Benchmarks, Games, and Cognitive Testscited by 11
- 2025ReliableEval: A Recipe for Stochastic LLM Evaluation via Method of Momentscited by 10
- 2025When Punctuation Matters: A Large-Scale Comparison of Prompt Robustness Methods for LLMscited by 10
- 2026JudgeSense: A Benchmark for Prompt Sensitivity in LLM-as-a-Judge Systemscited by 10
- 2025PRL: Prompts from Reinforcement Learningcited by 9
- 2025Exploring the Potential for Large Language Models to Demonstrate Rational Probabilistic Beliefscited by 8
12 most cited of 110 All 110 (JSON)
- 2026Generalization Is Stability, Not Accuracy: Multi-Axis Evaluation of LLMs1 Oct 2026
- 2026Framing the Narrative: Ideological Mimicry in Large Language Models29 Sep 2026
- 2026Hyper Algorithm Design Agent: Evolving Learnable Optimizer from Zero28 Sep 2026
- 2026Blaming Across the Aisle: Political Contrasting and Blame Attribution in the Danish Parliament22 Sep 2026
- 2026Necessary or Sufficient? Evaluating LLM Explanations With Behavioural Evidence4 Sep 2026
- 2026Prompt-Robust Language Models: Which Training Strategies Work?1 Sep 2026
- 2026PCFBench: A Diagnostic Benchmark for Product Carbon Footprint Estimation27 Aug 2026
- 2026Evaluating and Explaining Prompt Sensitivity of LLMs Using Interactions19 Aug 2026
- 2026Interpretable Humans, Alien LLMs: Expert Analysis of Latent Structures in Assessment Responses18 Aug 2026
- 2026Do Assessment Instruments Measure the Same Thing for Humans and LLMs? A Latent Structure Analysis16 Aug 2026
- 2026Do Influence Tactics Matter? Investigating Prompt Framing Effects in LLM Code Generation11 Aug 2026
- 2026Isotropy Cliffs: The Geometric Signature of Decision-Making in Large Language Models1 Aug 2026
12 newest of 110 All 110 (JSON)