mlsanityData to 14 Oct 2026

Rethinking Toxicity Evaluation in Large Language Models: A Multi-Label Perspective

arXiv 2510.15007 ↗First posted 16 Oct 2025cs.CL cs.AIcited by 2

On the map: LLM reasoning → Reasoning benchmarks and evaluation

also in 1 more
Abstract (arXiv)

Large language models (LLMs) have achieved impressive results across a range of natural language processing tasks, but their potential to generate harmful content has raised serious safety concerns. Current toxicity detectors primarily rely on single-label benchmarks, which cannot adequately capture the inherently ambiguous and multi-dimensional nature of real-world toxic prompts. This limitation results in biased evaluations, including missed toxic detections and false positives, undermining the reliability of existing detectors. Additionally, gathering comprehensive multi-label annotations across fine-grained toxicity categories is prohibitively costly, further hindering effective evaluation and development. To tackle these issues, we introduce three novel multi-label benchmarks for toxicity detection: Q-A-MLL, R-A-MLL, and H-X-MLL, derived from public toxicity datasets and annotated according to a detailed 15-category taxonomy. We further provide a theoretical proof that, on our released datasets, training with pseudo-labels yields better performance than directly learning from single-label supervision. In addition, we develop a pseudo-label-based toxicity detection method. Extensive experimental results show that our approach significantly surpasses advanced baselines, including GPT-4o and DeepSeek, thus enabling more accurate and reliable evaluation of multi-label toxicity in LLM-generated content.

Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Reasoning benchmarks and evaluation, one of 17 directions in LLM reasoning. Builds on 9 of its 42 references that are in the map. First posted on arXiv 16 Oct 2025.

Builds on

9 of 42 references.

References · 9

  1. 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
  2. 2023GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Promptscited by 560
  3. 2023Multilingual Jailbreak Challenges in Large Language Modelscited by 240
  4. 2023MasterKey: Automated Jailbreak Across Multiple Large Language Model Chatbotscited by 183
  5. 2022Language Models are General-Purpose Interfacescited by 97
  6. 2024Mind the Inconspicuous: Revealing the Hidden Weakness in Aligned LLMs' Refusal Boundariescited by 28
  7. 2023Unmasking and Improving Data Credibility: A Study with Datasets for Training Harmless Language Modelscited by 26
  8. 2024Toxicity Detection for Freecited by 15
  9. 2024Soft-Label Integration for Robust Toxicity Classificationcited by 1

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 2.

2 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Something Just Like TRuST : Toxicity Recognition of Span and Target
  2. 2026A Survey of Toxicity Detection and Mitigation Strategies for Multilingual Language Models
  3. 2024Realistic Evaluation of Toxicity in Large Language Models
  4. 2024RTP-LX: Can LLMs Evaluate Toxicity in Multilingual Scenarios?
  5. 2026Measuring and Mitigating Toxicity in Large Language Models: A Comprehensive Replication Study
  6. 2025ToxiFrench: Benchmarking and Enhancing Language Models via CoT Fine-Tuning for French Toxicity Detection
  7. 2026Where Does Toxicity Live? Mechanistic Localization and Targeted Suppression in Language Models
  8. 2025SMARTER: A Data-efficient Framework to Improve Toxicity Detection with Explanation via Self-augmenting Large Language Models