CAGE: A Framework for Culturally Adaptive Red-Teaming Benchmark Generation
On the map: LLM safety and security → Prompt injection and agent security
Abstract (arXiv)
Existing red-teaming benchmarks, when adapted to new languages via direct translation, fail to capture socio-technical vulnerabilities rooted in local culture and law, creating a critical blind spot in LLM safety evaluation. To address this gap, we introduce CAGE (Culturally Adaptive Generation), a framework that systematically adapts the adversarial intent of proven red-teaming prompts to new cultural contexts. At the core of CAGE is the Semantic Mold, a novel approach that disentangles a prompt's adversarial structure from its cultural content. This approach enables the modeling of realistic, localized threats rather than testing for simple jailbreaks. As a representative example, we demonstrate our framework by creating KoRSET, a Korean benchmark, which proves more effective at revealing vulnerabilities than direct translation baselines. CAGE offers a scalable solution for developing meaningful, context-aware safety benchmarks across diverse cultures. Our dataset and evaluation rubrics are publicly available at https://github.com/selectstar-ai/CAGE-paper. (WARNING: This paper contains model outputs that can be offensive in nature.)
Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Placed in Prompt injection and agent security, one of 12 directions in LLM safety and security. Builds on 40 of its 47 references that are in the map. First posted on arXiv 9 Feb 2026.
Builds on
40 of 47 references.
Closest ancestors · 3
Same direction, newest first
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal6 Feb
- 2023Red teaming ChatGPT via Jailbreaking: Bias, Robustness, Reliability and Toxicity30 Jan
- 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learned23 Aug
Other references · 37
- 2023GPT-4 Technical Reportcited by 18,132
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2024Qwen2.5 Technical Reportcited by 4,713
- 2024GPT-4o System Cardcited by 4,467
- 2023Qwen Technical Reportcited by 3,273
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
- 2024Gemma 2: Improving Open Language Models at a Practical Sizecited by 1,928
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,106
- 2021Ethical and social risks of harm from Language Modelscited by 957
- 2023AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Modelscited by 738
25 more
- 2023Tree of Attacks: Jailbreaking Black-Box LLMs Automaticallycited by 619
- 2023GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Promptscited by 520
- 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMscited by 460
- 2016Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samplescited by 439
- 2024SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Modelscited by 225
- 2023Multilingual Jailbreak Challenges in Large Language Modelscited by 222
- 2024AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMscited by 185
- 2023Do-Not-Answer: A Dataset for Evaluating Safeguards in LLMscited by 176
- 2023Model evaluation for extreme riskscited by 167
- 2024ALERT: A Comprehensive Benchmark for Assessing Large Language Models' Safety through Red Teamingcited by 96
- 2023Review of Large Vision Models and Visual Prompt Engineeringcited by 77
- 2023KoBBQ: Korean Bias Benchmark for Question Answeringcited by 71
- 2024AIR-Bench 2024: A Safety Benchmark Based on Risk Categories from Regulations and Policiescited by 69
- 2021Common Sense Beyond English: Evaluating and Improving Multilingual Language Models for Commonsense Reasoningcited by 64
- 2024SG-Bench: Evaluating LLM Safety Generalization Across Diverse Tasks and Prompt Typescited by 58
- 2025PolyGuard: A Multilingual Safety Moderation Tool for 17 Languagescited by 57
- 2023Bias Testing and Mitigation in LLM-based Code Generationcited by 53
- 2023All Languages Matter: On the Multilingual Safety of Large Language Modelscited by 51
- 2024EXAONE 3.5: Series of Large Language Models for Real-world Use Casescited by 50
- 2024KorNAT: LLM Alignment Benchmark for Korean Social Values and Common Knowledgecited by 33
- 2024MBBQ: A Dataset for Cross-Lingual Comparison of Stereotypes in Generative LLMscited by 32
- 2023KoSBi: A Dataset for Mitigating Social Bias Risks Towards Safer Large Language Model Applicationcited by 24
- 2023CBBQ: A Chinese Bias Benchmark Dataset Curated with Human-AI Collaboration for Large Language Modelscited by 22
- 2023SQuARe: A Large-Scale Dataset of Sensitive Questions and Acceptable Responses Created Through Human-Machine Collaborationcited by 13
- 2025RICoTA: Red-teaming of In-the-wild Conversation with Test Attemptscited by 1
Built on by
Citing papers per year: 2026: 2.
2 papers.