Flaw or Artifact? Rethinking Prompt Sensitivity in Evaluating LLMs
On the map: LLM reasoning → Prompting and chain-of-thought reasoning
Abstract (arXiv)
Prompt sensitivity, referring to the phenomenon where paraphrasing (i.e., repeating something written or spoken using different words) leads to significant changes in large language model (LLM) performance, has been widely accepted as a core limitation of LLMs. In this work, we revisit this issue and ask: Is the widely reported high prompt sensitivity truly an inherent weakness of LLMs, or is it largely an artifact of evaluation processes? To answer this question, we systematically evaluate 7 LLMs (e.g., GPT and Gemini family) across 6 benchmarks, including both multiple-choice and open-ended tasks on 12 diverse prompt templates. We find that much of the prompt sensitivity stems from heuristic evaluation methods, including log-likelihood scoring and rigid answer matching, which often overlook semantically correct responses expressed through alternative phrasings, such as synonyms or paraphrases. When we adopt LLM-as-a-Judge evaluations, we observe a substantial reduction in performance variance and a consistently higher correlation in model rankings across prompts. Our findings suggest that modern LLMs are more robust to prompt templates than previously believed, and that prompt sensitivity may be more an artifact of evaluation than a flaw in the models.
Key facts. Cited by 23 papers in the map (data through 7 Oct 2026). Placed in Prompting and chain-of-thought reasoning, one of 17 directions in LLM reasoning. Builds on 20 of its 24 references that are in the map. First posted on arXiv 1 Sep 2025.
Builds on
20 of 24 references.
References · 20
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2021Measuring Mathematical Problem Solving With the MATH Datasetcited by 5,203
- 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,710
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,018
- 2023GPQA: A Graduate-Level Google-Proof Q&A Benchmarkcited by 2,748
- 2023G-Eval: NLG Evaluation using GPT-4 with Better Human Alignmentcited by 2,205
- 2018Can a Suit of Armor Conduct Electricity? A New Dataset for Open Book Question Answeringcited by 2,114
- 2023LongBench: A Bilingual, Multitask Benchmark for Long Context Understandingcited by 1,378
- 2022Super-NaturalInstructions: Generalization via Declarative Instructions on 1600+ NLP Taskscited by 858
- 2023Quantifying Language Models' Sensitivity to Spurious Features in Prompt Design or: How I learned to start worrying about prompt formattingcited by 778
- 2018CoQA: A Conversational Question Answering Challengecited by 674
8 more
- 2017The NarrativeQA Reading Comprehension Challengecited by 590
- 2023Is ChatGPT a Good NLG Evaluator? A Preliminary Studycited by 420
- 2023Large Language Models Are State-of-the-Art Evaluators of Translation Qualitycited by 416
- 2023State of What Art? A Call for Multi-Prompt LLM Evaluationcited by 299
- 2022Can large language models reason about medical questions?cited by 194
- 2024Mind Your Format: Towards Consistent Evaluation of In-Context Learning Improvementscited by 82
- 2024Efficient multi-prompt evaluation of LLMscited by 72
- 2024NutriBench: A Dataset for Evaluating Large Language Models on Nutrition Estimation from Meal Descriptionscited by 17
Built on by
Citing papers per year: 2025: 1; 2026: 22.
23 papers.
Sort:
By area:
- 2025WebDevJudge: Evaluating (M)LLMs as Critiques for Web Development Qualitycited by 10
- 2026JudgeSense: A Benchmark for Prompt Sensitivity in LLM-as-a-Judge Systemscited by 10
- 2026Beyond Accuracy: Policy Invariance as a Reliability Test for LLM Safety Judgescited by 8
- 2026Measuring Pragmatic Influence in Large Language Model Instructionscited by 3
- 2026Banana100: Breaking NR-IQA Metrics by 100 Iterative Image Replications with Nano Banana Procited by 1
- 2026AI Native Asset Intelligencecited by 1
- 2026PRISM: A Benchmark for Programmatic Spatial-Temporal Reasoningcited by 1
- 2026PromptAudit: Auditing Prompt Sensitivity in LLM-Based Vulnerability Detectioncited by 1
- 2026Where the Verifier Fails: A Category-Level Audit of Reward Signals in RLVRcited by 1
- 2026ExpressEdit: Fast Editing of Stylized Facial Expressions with Diffusion Models in Photoshopcited by 0
- 2026LLMs as annotators of credibility assessment in Danish asylum decisions: evaluating classification performance and errors beyond aggregated metricscited by 0
- 2026Spurious Prompts: Can Irrelevant Prompts Steer Large Language Models?cited by 0
11 more
- 2026The Unsampled Truth: Quantifying Prompt Artifacts in LM Psychometricscited by 0
- 2026Discourse-Role Labels as Presentation-Time Variables for Context Use in Language Modelscited by 0
- 2026Document-Authored Control-Signal Impersonation: A Low-Cost Indirect Prompt Attack on RAG Safety Boundariescited by 0
- 2026Mitigating LLM-based p-Hacking by Preregistering for the Next LLMcited by 0
- 2026Understanding Evaluation Illusion in Diffusion Large Language Modelscited by 0
- 2026Agent Step Value: Auditing Evaluator-Channel Reversals in Black-Box Agent Tracescited by 0
- 2026Measuring GEO Visibility: Prompt Corpora Define the Answer Marketcited by 0
- 2026AfriSyCo: Measuring Assertive Framing, Verification, and Wording Sensitivity Around African-Language Contentcited by 0
- 2026What Changes When Fact-Verification Scores Improve? Evidence and Answer Accounting Across Trained Verifiers and LLMscited by 0
- 2026The Decomposition Tax: LLM Pipelines Lose Up to 40 Accuracy Points at Their Own Interfacescited by 0
- 2026Generalization Is Stability, Not Accuracy: Multi-Axis Evaluation of LLMscited by 0
- 2026Generalization Is Stability, Not Accuracy: Multi-Axis Evaluation of LLMs1 Oct 2026
- 2026The Decomposition Tax: LLM Pipelines Lose Up to 40 Accuracy Points at Their Own Interfaces26 Sep 2026
- 2026What Changes When Fact-Verification Scores Improve? Evidence and Answer Accounting Across Trained Verifiers and LLMs22 Sep 2026
- 2026AfriSyCo: Measuring Assertive Framing, Verification, and Wording Sensitivity Around African-Language Content15 Sep 2026
- 2026Measuring GEO Visibility: Prompt Corpora Define the Answer Market6 Sep 2026
- 2026Where the Verifier Fails: A Category-Level Audit of Reward Signals in RLVR1 Sep 2026
- 2026Agent Step Value: Auditing Evaluator-Channel Reversals in Black-Box Agent Traces5 Jul 2026
- 2026Understanding Evaluation Illusion in Diffusion Large Language Models28 Jun 2026
- 2026Mitigating LLM-based p-Hacking by Preregistering for the Next LLM26 Jun 2026
- 2026Document-Authored Control-Signal Impersonation: A Low-Cost Indirect Prompt Attack on RAG Safety Boundaries8 Jun 2026
- 2026Discourse-Role Labels as Presentation-Time Variables for Context Use in Language Models2 Jun 2026
- 2026The Unsampled Truth: Quantifying Prompt Artifacts in LM Psychometrics2 Jun 2026
11 more
- 2026Spurious Prompts: Can Irrelevant Prompts Steer Large Language Models?28 May 2026
- 2026PromptAudit: Auditing Prompt Sensitivity in LLM-Based Vulnerability Detection22 May 2026
- 2026PRISM: A Benchmark for Programmatic Spatial-Temporal Reasoning19 May 2026
- 2026LLMs as annotators of credibility assessment in Danish asylum decisions: evaluating classification performance and errors beyond aggregated metrics13 May 2026
- 2026AI Native Asset Intelligence9 May 2026
- 2026Beyond Accuracy: Policy Invariance as a Reliability Test for LLM Safety Judges7 May 2026
- 2026JudgeSense: A Benchmark for Prompt Sensitivity in LLM-as-a-Judge Systems26 Apr 2026
- 2026ExpressEdit: Fast Editing of Stylized Facial Expressions with Diffusion Models in Photoshop3 Apr 2026
- 2026Banana100: Breaking NR-IQA Metrics by 100 Iterative Image Replications with Nano Banana Pro3 Apr 2026
- 2026Measuring Pragmatic Influence in Large Language Model Instructions2 Feb 2026
- 2025WebDevJudge: Evaluating (M)LLMs as Critiques for Web Development Quality21 Oct 2025
- 2025WebDevJudge: Evaluating (M)LLMs as Critiques for Web Development Qualitycited by 10
- 2026JudgeSense: A Benchmark for Prompt Sensitivity in LLM-as-a-Judge Systemscited by 10
- 2026Measuring Pragmatic Influence in Large Language Model Instructionscited by 3
- 2026AI Native Asset Intelligencecited by 1
- 2026PromptAudit: Auditing Prompt Sensitivity in LLM-Based Vulnerability Detectioncited by 1
- 2026Where the Verifier Fails: A Category-Level Audit of Reward Signals in RLVRcited by 1
- 2026LLMs as annotators of credibility assessment in Danish asylum decisions: evaluating classification performance and errors beyond aggregated metricscited by 0
- 2026Spurious Prompts: Can Irrelevant Prompts Steer Large Language Models?cited by 0
- 2026The Unsampled Truth: Quantifying Prompt Artifacts in LM Psychometricscited by 0
- 2026Discourse-Role Labels as Presentation-Time Variables for Context Use in Language Modelscited by 0
- 2026Mitigating LLM-based p-Hacking by Preregistering for the Next LLMcited by 0
- 2026Agent Step Value: Auditing Evaluator-Channel Reversals in Black-Box Agent Tracescited by 0
12 most cited of 17 All 17 (JSON)
- 2026Generalization Is Stability, Not Accuracy: Multi-Axis Evaluation of LLMs1 Oct 2026
- 2026The Decomposition Tax: LLM Pipelines Lose Up to 40 Accuracy Points at Their Own Interfaces26 Sep 2026
- 2026What Changes When Fact-Verification Scores Improve? Evidence and Answer Accounting Across Trained Verifiers and LLMs22 Sep 2026
- 2026AfriSyCo: Measuring Assertive Framing, Verification, and Wording Sensitivity Around African-Language Content15 Sep 2026
- 2026Measuring GEO Visibility: Prompt Corpora Define the Answer Market6 Sep 2026
- 2026Where the Verifier Fails: A Category-Level Audit of Reward Signals in RLVR1 Sep 2026
- 2026Agent Step Value: Auditing Evaluator-Channel Reversals in Black-Box Agent Traces5 Jul 2026
- 2026Mitigating LLM-based p-Hacking by Preregistering for the Next LLM26 Jun 2026
- 2026Discourse-Role Labels as Presentation-Time Variables for Context Use in Language Models2 Jun 2026
- 2026The Unsampled Truth: Quantifying Prompt Artifacts in LM Psychometrics2 Jun 2026
- 2026Spurious Prompts: Can Irrelevant Prompts Steer Large Language Models?28 May 2026
- 2026PromptAudit: Auditing Prompt Sensitivity in LLM-Based Vulnerability Detection22 May 2026
12 newest of 17 All 17 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2025Promptception: How Sensitive Are Large Multimodal Models to Prompts?
- 2024Does Prompt Formatting Have Any Impact on LLM Performance?
- 2026Same Question, Different Answers: Evaluating LLM Reliability Beyond Accuracy
- 2026Beyond Prompt Engineering: A Systematic Analysis of Prompt Lexical Sensitivity and Its Impacts on Quality
- 2026Measuring Evaluation-Context Divergence in Open-Weight LLMs: A Paired-Prompt Protocol with Pilot Evidence of Alignment-Pipeline-Specific Heterogeneity
- 2024Do LLMs Know When to NOT Answer? Investigating Abstention Abilities of Large Language Models
- 2024Do LLMs Overcome Shortcut Learning? An Evaluation of Shortcut Challenges in Large Language Models
- 2025Cross-Lingual Prompt Steerability: Towards Accurate and Robust LLM Behavior across Languages