SciHazard: A Benchmark for Measuring Scientific Safety Risks with Decomposed Harm Scoring
Not on the map. Why?
Abstract (arXiv)
Large language models (LLMs) increasingly support science, but they can also convert hazardous scientific knowledge into actionable misuse guidance. Existing benchmarks often rely on templated queries disconnected from real-world hazards, and employ LLM-as-a-Judge paradigms without domain grounding. To address this, we introduce SciHazard, a real-world-grounded benchmark for scientific risks and a dataset agnostic evaluation framework for measuring harmfulness. SciHazard contains 2400 hazardous questions and 600 oversafety questions across 12 disciplines, with both queries grounded in regulated entities and documented failure scenarios. To compute textscDeHarm-Score , we develop a decomposed evaluating procedure that combines query hazard severity, refusal behavior, and response-level risk. For non-refused responses, it further decomposes response-level harm into textscExecutability, quantified via dynamic checklists with importance weighting, and textscNet-new risk, assessed through retrieval-augmented claim extraction and synthesis-barrier verification. An expert-validation study shows that textscDeHarm-Score improves agreement with expert annotations by 90.17% over the strongest baseline. We benchmark 31 frontier LLMs and deep research agents in an extensive scientific safety evaluation. Notably, deep research agents yield 32.3% higher mean textscDeHarm-Score than standard LLMs, exposing autonomous agents as a critical blind spot in current safety defenses. Code and dataset are available at https://anonymous.4open.science/r/DeharmScore-7B55.
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Builds on 26 of its 32 references that are in the map. First posted on arXiv 21 Jul 2026.
Builds on
26 of 32 references.
References · 26
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
- 2024AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agentscited by 437
- 2024A StrongREJECT for Empty Jailbreakscited by 385
- 2025WebThinker: Empowering Large Reasoning Models with Deep Research Capabilitycited by 335
- 2024SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Modelscited by 228
- 2025OS-Harm: A Benchmark for Measuring Safety of Computer Use Agentscited by 111
- 2025SafeArena: Evaluating the Safety of Autonomous Web Agentscited by 102
- 2023Frontier AI Regulation: Managing Emerging Risks to Public Safetycited by 98
- 2025Mind2Web 2: Evaluating Agentic Search with Agent-as-a-Judgecited by 76
- 2026Intern-S1-Pro: Scientific Multimodal Foundation Model at Trillion Scalecited by 29
- 2024LabSafety Bench: Benchmarking LLMs on Safety Issues in Scientific Labscited by 25
14 more
- 2025FORTRESS: Frontier Risk Evaluation for National Security and Public Safetycited by 24
- 2025FACT-AUDIT: An Adaptive Multi-Agent Framework for Dynamic Fact-Checking Evaluation of Large Language Modelscited by 19
- 2024SciSafeEval: A Comprehensive Benchmark for Safety Alignment of Large Language Models in Scientific Taskscited by 18
- 2026ClawSafety: "Safe" LLMs, Unsafe Agentscited by 17
- 2025SafeScientist: Toward Risk-Aware Scientific Discoveries by LLM Agentscited by 16
- 2024ChemSafetyBench: Benchmarking LLM Safety on Chemistry Domaincited by 15
- 2025SoSBench: Benchmarking Safety Alignment on Six Scientific Domainscited by 12
- 2025Confusion is the Final Barrier: Rethinking Jailbreak Evaluation and Investigating the Real Misuse Threat of LLMscited by 11
- 2025RealHarm: A Collection of Real-World Language Model Application Failurescited by 8
- 2025Auto-Eval Judge: Towards a General Agentic Framework for Task Completion Evaluationcited by 8
- 2025Quantifying CBRN Risk in Frontier Modelscited by 6
- 2025Forbidden Science: Dual-Use AI Challenge Benchmark and Scientific Refusal Testscited by 2
- 2025Deep Research Agents Brings Deeper Harmcited by 2
- 2026SafeSci: Safety Evaluation of Large Language Models in Science Domains and Beyondcited by 2
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2025HarmMetric Eval: Benchmarking Metrics and Judges for LLM Harmfulness Assessment
- 2026Chain of Risk: Safety Failures in Large Reasoning Models and Mitigation via Adaptive Multi-Principle Steering
- 2025CASE-Bench: Context-Aware SafEty Benchmark for Large Language Models
- 2025Beyond Safe Answers: A Benchmark for Evaluating True Risk Awareness in Large Reasoning Models
- 2026HarmProfile: Characterizing Harmful Distributions in Frontier LLMs
- 2024SafeBench: A Safety Evaluation Framework for Multimodal Large Language Models
- 2026StealthGraph: Exposing Domain-Specific Risks in LLMs through Knowledge-Graph-Guided Harmful Prompt Generation
- 2026When Medical Safety Alignment Fails: A Benchmark for Evaluating LLMs on High-Risk Medical Queries