ChemSafetyBench: Benchmarking LLM Safety on Chemistry Domain
On the map: LLM safety and security → Safety alignment, refusal and guardrails
Abstract (arXiv)
The advancement and extensive application of large language models (LLMs) have been remarkable, including their use in scientific research assistance. However, these models often generate scientifically incorrect or unsafe responses, and in some cases, they may encourage users to engage in dangerous behavior. To address this issue in the field of chemistry, we introduce ChemSafetyBench, a benchmark designed to evaluate the accuracy and safety of LLM responses. ChemSafetyBench encompasses three key tasks: querying chemical properties, assessing the legality of chemical uses, and describing synthesis methods, each requiring increasingly deeper chemical knowledge. Our dataset has more than 30K samples across various chemical materials. We incorporate handcrafted templates and advanced jailbreaking scenarios to enhance task diversity. Our automated evaluation framework thoroughly assesses the safety, accuracy, and appropriateness of LLM responses. Extensive experiments with state-of-the-art LLMs reveal notable strengths and critical vulnerabilities, underscoring the need for robust safety measures. ChemSafetyBench aims to be a pivotal tool in developing safer AI technologies in chemistry. Our code and dataset are available at https://github.com/HaochenZhao/SafeAgent4Chem. Warning: this paper contains discussions on the synthesis of controlled chemicals using AI models.
Key facts. Cited by 15 papers in the map (data through 14 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 28 of its 44 references that are in the map. First posted on arXiv 23 Nov 2024.
Builds on
28 of 44 references.
Closest ancestors · 2
Same direction, newest first
- 2024SafetyPrompts: a Systematic Review of Open Datasets for Evaluating and Improving Large Language Model Safety8 Apr
- 2024ALERT: A Comprehensive Benchmark for Assessing Large Language Models' Safety through Red Teaming6 Apr
Other references · 26
- 2023GPT-4 Technical Reportcited by 18,396
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2021Training Verifiers to Solve Math Word Problemscited by 10,109
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
- 2021Measuring Mathematical Problem Solving With the MATH Datasetcited by 5,371
- 2023Qwen Technical Reportcited by 3,344
- 2022Learn to Explain: Multimodal Reasoning via Thought Chains for Science Question Answeringcited by 1,919
- 2022Large Language Models Encode Clinical Knowledgecited by 1,830
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
- 2023ChemCrow: Augmenting large-language models with chemistry toolscited by 631
14 more
- 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 518
- 2023SciBench: Evaluating College-Level Scientific Problem-Solving Abilities of Large Language Modelscited by 256
- 2024SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Modelscited by 228
- 2023SafetyBench: Evaluating the Safety of Large Language Modelscited by 199
- 2023What can Large Language Models do in chemistry? A comprehensive benchmark on eight taskscited by 185
- 2024ChemLLM: A Chemical Large Language Modelcited by 106
- 2023Amortizing intractable inference in large language modelscited by 97
- 2024Risks of AI Scientists: Prioritizing Safeguarding Over Autonomycited by 49
- 2023A Comprehensive Evaluation of Large Language Models on Benchmark Biomedical Text Processing Taskscited by 36
- 2023LLM-Prop: Predicting Physical And Electronic Properties Of Crystalline Solids From Their Text Descriptionscited by 29
- 2024MARIO Eval: Evaluate Your Math LLM with your Math LLM--A mathematical dataset evaluation toolkitcited by 14
- 2024Large Language Models in Plant Biologycited by 8
- 2023Testing LLM performance on the Physics GRE: some observationscited by 4
- 2024Assessing The Potential Of Mid-Sized Language Models For Clinical QAcited by 4
Built on by
Citing papers per year: 2025: 8; 2026: 7.
15 papers.
Sort:
By area:
- 2025OpenAgentSafety: A Comprehensive Framework for Evaluating Real-World AI Agent Safetycited by 75
- 2025Safety at Scale: A Comprehensive Survey of Large Model and Agent Safetycited by 67
- 2025A Survey of Scientific Large Language Models: From Data Foundations to Agent Frontierscited by 37
- 2025Alignment and Safety in Large Language Models: Safety Mechanisms, Training Paradigms, and Emerging Challengescited by 15
- 2025SUPERChem: A Multimodal Reasoning Benchmark in Chemistrycited by 9
- 2026LABSHIELD: A Multimodal Benchmark for Safety-Critical Reasoning and Planning in Scientific Laboratoriescited by 3
- 2026Boiling the Frog: A Multi-Turn Benchmark for Agentic Safetycited by 3
- 2025Large Language Models Transform Organic Synthesis From Reaction Prediction to Automationcited by 1
- 2025Fine-Tuned Thoughts: Leveraging Chain-of-Thought Reasoning for Industrial Asset Health Monitoringcited by 1
- 2026Cooking Up Risks: Benchmarking and Reducing Food Safety Risks in Large Language Modelscited by 1
- 2026SciHazard: A Benchmark for Measuring Scientific Safety Risks with Decomposed Harm Scoringcited by 1
- 2025The Dual-use Dilemma in LLMs: Do Empowering Ethical Capacities Make a Degraded Utility?cited by 0
- 2026SafeMol: Dual-Modality Safety Alignment for Molecular Multimodal Models27 Sep 2026
- 2026FUSE: An Evaluating Framework for Dangerous Capabilities of LLMs2 Sep 2026
- 2026onepot-Bench 0: towards lab-aware in silico chemistry benchmarks3 Aug 2026
- 2026SciHazard: A Benchmark for Measuring Scientific Safety Risks with Decomposed Harm Scoring21 Jul 2026
- 2026Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety21 May 2026
- 2026Cooking Up Risks: Benchmarking and Reducing Food Safety Risks in Large Language Models1 Apr 2026
- 2026LABSHIELD: A Multimodal Benchmark for Safety-Critical Reasoning and Planning in Scientific Laboratories12 Mar 2026
- 2025SUPERChem: A Multimodal Reasoning Benchmark in Chemistry1 Dec 2025
- 2025Fine-Tuned Thoughts: Leveraging Chain-of-Thought Reasoning for Industrial Asset Health Monitoring21 Oct 2025
- 2025A Survey of Scientific Large Language Models: From Data Foundations to Agent Frontiers28 Aug 2025
- 2025Large Language Models Transform Organic Synthesis From Reaction Prediction to Automation7 Aug 2025
- 2025Alignment and Safety in Large Language Models: Safety Mechanisms, Training Paradigms, and Emerging Challenges25 Jul 2025
- 2025SUPERChem: A Multimodal Reasoning Benchmark in Chemistrycited by 9
- 2026LABSHIELD: A Multimodal Benchmark for Safety-Critical Reasoning and Planning in Scientific Laboratoriescited by 3
- 2025Fine-Tuned Thoughts: Leveraging Chain-of-Thought Reasoning for Industrial Asset Health Monitoringcited by 1
- 2025The Dual-use Dilemma in LLMs: Do Empowering Ethical Capacities Make a Degraded Utility?cited by 0
- 2026LABSHIELD: A Multimodal Benchmark for Safety-Critical Reasoning and Planning in Scientific Laboratories12 Mar 2026
- 2025SUPERChem: A Multimodal Reasoning Benchmark in Chemistry1 Dec 2025
- 2025Fine-Tuned Thoughts: Leveraging Chain-of-Thought Reasoning for Industrial Asset Health Monitoring21 Oct 2025
- 2025The Dual-use Dilemma in LLMs: Do Empowering Ethical Capacities Make a Degraded Utility?20 Jan 2025
- 2025Large Language Models Transform Organic Synthesis From Reaction Prediction to Automationcited by 1
- 2026SciHazard: A Benchmark for Measuring Scientific Safety Risks with Decomposed Harm Scoringcited by 1
- 2026onepot-Bench 0: towards lab-aware in silico chemistry benchmarkscited by 0
- 2026FUSE: An Evaluating Framework for Dangerous Capabilities of LLMscited by 0
- 2026FUSE: An Evaluating Framework for Dangerous Capabilities of LLMs2 Sep 2026
- 2026onepot-Bench 0: towards lab-aware in silico chemistry benchmarks3 Aug 2026
- 2026SciHazard: A Benchmark for Measuring Scientific Safety Risks with Decomposed Harm Scoring21 Jul 2026
- 2025Large Language Models Transform Organic Synthesis From Reaction Prediction to Automation7 Aug 2025
Similar, not cited
Close in wording, no citation either way
- 2026ChemDIRT: A Diversified Instruction, Representation, and Task Benchmark for Robust Chemistry-LLM Evaluation
- 2025MolErr2Fix: Benchmarking LLM Trustworthiness in Chemistry via Modular Error Detection, Localization, Explanation, and Revision
- 2024Are large language models superhuman chemists?
- 2024A Review of Large Language Models and Autonomous Agents in Chemistry
- 2025ChemAU: Harness the Reasoning of LLMs in Chemical Research with Adaptive Uncertainty Estimation
- 2025QCBench: Evaluating Large Language Models on Domain-Specific Quantitative Chemistry
- 2025ChemOrch: Empowering LLMs with Chemical Intelligence via Synthetic Instructions
- 2026From Answers to States: Verifiable Process-Level Evaluation of Chemical Reasoning in Large Language Models