mlsanityData to 7 Oct 2026

PersonaTeaming: Supporting Persona-Driven Red-Teaming for Generative AI

arXiv 2605.05682 ↗First posted 7 May 2026cs.HC cs.AI cs.CYcited by 0

On the map: LLM safety and security → Prompt injection and agent security

Abstract (arXiv)

Recent developments in AI safety research have called for red-teaming methods that effectively surface potential risks posed by generative AI models, with growing emphasis on how red-teamers' backgrounds and perspectives shape their strategies and the risks they uncover. While automated red-teaming approaches promise to complement human red-teaming through larger-scale exploration, existing automated approaches do not account for human identities and rarely incorporate human inputs. In this work, we explore persona-driven red-teaming to advance both automated red-teaming and human-AI collaboration. We first develop PersonaTeaming Workflow, which incorporates personas into the adversarial prompt generation process to explore a wider spectrum of adversarial strategies. Compared to RainbowPlus, a state-of-the-art automated red-teaming method, PersonaTeaming Workflow achieves higher attack success rates while maintaining prompt diversity. However, since automated personas only approximate real human perspectives, we further instantiate PersonaTeaming Workflow as PersonaTeaming Playground, a user-facing interface that enables red-teamers to author their own personas and collaborate with AI to mutate and refine prompts. In a user study with 11 industry practitioners, we found that PersonaTeaming Playground enabled diverse red-teaming strategies and outputs that practitioners perceived as useful, and that AI-generated suggestions in the PersonaTeaming Playground encouraged out-of-the-box thinking even when practitioners did not follow them strictly. Together, our work advances both automated and human-in-the-loop approaches to red-teaming, while shedding light on interaction patterns and design insights for supporting human-AI collaboration in generative AI red-teaming.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Prompt injection and agent security, one of 12 directions in LLM safety and security. Builds on 42 of its 78 references that are in the map. First posted on arXiv 7 May 2026.

Builds on

42 of 78 references.

Closest ancestors · 5

Same direction, newest first

  1. 2024Ferret: Faster and Effective Automated Red Teaming with Reward-Based Scoring Technique20 Aug
  2. 2024Ruby Teaming: Improving Quality Diversity Search with Memory for Automated Red Teaming17 Jun
  3. 2024Rainbow Teaming: Open-Ended Generation of Diverse Adversarial Prompts26 Feb
  4. 2024Red-Teaming for Generative AI: Silver Bullet or Security Theater?29 Jan
  5. 2022Red Teaming Language Models with Language Models7 Feb

Other references · 37

  1. 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,049
  2. 2023Generative Agents: Interactive Simulacra of Human Behaviorcited by 3,500
  3. 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
  4. 2021Ethical and social risks of harm from Language Modelscited by 957
  5. 2023GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Promptscited by 520
  6. 2018Texygen: A Benchmarking Platform for Text Generation Modelscited by 484
  7. 2022Social Simulacra: Creating Populated Prototypes for Social Computing Systemscited by 300
  8. 2022CoAuthor: Designing a Human-AI Collaborative Writing Dataset for Exploring Language Model Capabilitiescited by 245
  9. 2023Marked Personas: Using Natural Language Prompts to Measure Stereotypes in Language Modelscited by 204
  10. 2024AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMscited by 185
  11. 2025Constitutional Classifiers: Defending against Universal Jailbreaks across Thousands of Hours of Red Teamingcited by 172
  12. 2021Understanding the Capabilities, Limitations, and Societal Impact of Large Language Modelscited by 159
25 more
  1. 2024Who Validates the Validators? Aligning LLM-Assisted Evaluation of LLM Outputs with Human Preferencescited by 142
  2. 2023AI Transparency in the Age of LLMs: A Human-Centered Research Roadmapcited by 119
  3. 2023ChainForge: A Visual Toolkit for Prompt Engineering and LLM Hypothesis Testingcited by 88
  4. 2022"Help Me Help the AI": Understanding How Explainability Can Support Human-AI Interactioncited by 63
  5. 2023Rehearsal: Simulating Conflict to Teach Conflict Resolutioncited by 54
  6. 2024Shaping Human-AI Collaboration: Varied Scaffolding Levels in Co-writing with Language Modelscited by 51
  7. 2021Everyday algorithm auditing: Understanding the power of everyday users in surfacing harmful algorithmic behaviorscited by 47
  8. 2024AI auditing: The Broken Bus on the Road to AI Accountabilitycited by 42
  9. 2025Fostering Appropriate Reliance on Large Language Models: The Role of Explanations, Sources, and Inconsistenciescited by 39
  10. 2022Understanding Practices, Challenges, and Opportunities for User-Engaged Algorithm Auditing in Industry Practicecited by 30
  11. 2023Rethinking Human-AI Collaboration in Complex Medical Decision Making: A Case Study in Sepsis Diagnosiscited by 30
  12. 2025Actions Speak Louder than Words: Agent Decisions Reveal Implicit Biases in Language Modelscited by 30
  13. 2021Discovering and Validating AI Errors With Crowdsourced Failure Reportscited by 28
  14. 2024Farsight: Fostering Responsible AI Awareness During AI Application Prototypingcited by 28
  15. 2022A Taxonomy of Human and ML Strengths in Decision-Making to Investigate Human-ML Complementaritycited by 22
  16. 2025Synthetic Socratic Debates: Examining Persona Effects on Moral Decision and Persuasion Dynamicscited by 19
  17. 2025Persona-Augmented Benchmarking: Evaluating LLMs Across Diverse Writing Stylescited by 15
  18. 2025WeAudit: Scaffolding User Auditors and AI Practitioners in Auditing Generative AIcited by 13
  19. 2025A Tale of Two Identities: An Ethical Audit of Human and AI-Crafted Personascited by 8
  20. 2024Policy Maps: Tools for Guiding the Unbounded Space of LLM Behaviorscited by 5
  21. 2024AURA: Amplifying Understanding, Resilience, and Awareness for Responsible AI Content Workcited by 5
  22. 2025Who's Asking? Evaluating LLM Robustness to Inquiry Personas in Factual Question Answeringcited by 4
  23. 2025MIRAGE: Multi-model Interface for Reviewing and Auditing Generative Text-to-Image AIcited by 3
  24. 2024Understanding Human-AI Collaboration in Music Therapy Through Co-Design with Therapistscited by 2
  25. 2025Vipera: Towards systematic auditing of generative text-to-image models at scalecited by 1

Built on by

Not cited yet.