Rethinking Toxicity Evaluation in Large Language Models: A Multi-Label Perspective
On the map: LLM reasoning → Reasoning benchmarks and evaluation
also in 1 more
Abstract (arXiv)
Large language models (LLMs) have achieved impressive results across a range of natural language processing tasks, but their potential to generate harmful content has raised serious safety concerns. Current toxicity detectors primarily rely on single-label benchmarks, which cannot adequately capture the inherently ambiguous and multi-dimensional nature of real-world toxic prompts. This limitation results in biased evaluations, including missed toxic detections and false positives, undermining the reliability of existing detectors. Additionally, gathering comprehensive multi-label annotations across fine-grained toxicity categories is prohibitively costly, further hindering effective evaluation and development. To tackle these issues, we introduce three novel multi-label benchmarks for toxicity detection: Q-A-MLL, R-A-MLL, and H-X-MLL, derived from public toxicity datasets and annotated according to a detailed 15-category taxonomy. We further provide a theoretical proof that, on our released datasets, training with pseudo-labels yields better performance than directly learning from single-label supervision. In addition, we develop a pseudo-label-based toxicity detection method. Extensive experimental results show that our approach significantly surpasses advanced baselines, including GPT-4o and DeepSeek, thus enabling more accurate and reliable evaluation of multi-label toxicity in LLM-generated content.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Reasoning benchmarks and evaluation, one of 17 directions in LLM reasoning. Builds on 9 of its 42 references that are in the map. First posted on arXiv 16 Oct 2025.
Builds on
9 of 42 references.
References · 9
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
- 2023GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Promptscited by 560
- 2023Multilingual Jailbreak Challenges in Large Language Modelscited by 240
- 2023MasterKey: Automated Jailbreak Across Multiple Large Language Model Chatbotscited by 183
- 2022Language Models are General-Purpose Interfacescited by 97
- 2024Mind the Inconspicuous: Revealing the Hidden Weakness in Aligned LLMs' Refusal Boundariescited by 28
- 2023Unmasking and Improving Data Credibility: A Study with Datasets for Training Harmless Language Modelscited by 26
- 2024Toxicity Detection for Freecited by 15
- 2024Soft-Label Integration for Robust Toxicity Classificationcited by 1
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2025Something Just Like TRuST : Toxicity Recognition of Span and Target
- 2026A Survey of Toxicity Detection and Mitigation Strategies for Multilingual Language Models
- 2024Realistic Evaluation of Toxicity in Large Language Models
- 2024RTP-LX: Can LLMs Evaluate Toxicity in Multilingual Scenarios?
- 2026Measuring and Mitigating Toxicity in Large Language Models: A Comprehensive Replication Study
- 2025ToxiFrench: Benchmarking and Enhancing Language Models via CoT Fine-Tuning for French Toxicity Detection
- 2026Where Does Toxicity Live? Mechanistic Localization and Targeted Suppression in Language Models
- 2025SMARTER: A Data-efficient Framework to Improve Toxicity Detection with Explanation via Self-augmenting Large Language Models