跳到正文
arXiv:cs.AI· Dasol Choi, Eugenia Kim, Jaewon Noh, Sang Seo, Eunmi Kim, Myunggyo Oh, Yunjin Park, Brigitta Jesica Kartono, Josef Pichlmeier, Helena Berndt, Sai Krishna Mendu, Glenn Johannes Tungka, \"Ozlem G\"ok\c{c}e, Suresh Gehlot, Katherine Pratt, Amanda Minnich, Haon Park·· 20 小时前

XL-SafetyBench:面向 LLM 安全与文化敏感性的国家级跨文化基准

XL-SafetyBench: A Country-Grounded Cross-Cultural Benchmark for LLM Safety and Cultural Sensitivity

AI 导读

XL-SafetyBench 是一个覆盖 10 个国家-语言对、含 5,500 条测试用例的 LLM 安全基准,由国家级对抗提示词的 Jailbreak Benchmark 与文化敏感性嵌入无害请求的 Cultural Benchmark 组成。

正文

Authors:Dasol Choi, Eugenia Kim, Jaewon Noh, Sang Seo, Eunmi Kim, Myunggyo Oh, Yunjin Park, Brigitta Jesica Kartono, Josef Pichlmeier, Helena Berndt, Sai Krishna Mendu, Glenn Johannes Tungka, Özlem Gökçe, Suresh Gehlot, Katherine Pratt, Amanda Minnich, Haon Park

View PDF HTML (experimental)

Abstract:Current LLM safety benchmarks are predominantly English-centric and often rely on translation, failing to capture country-specific harms. Moreover, they rarely evaluate a model's ability to detect culturally embedded sensitivities as distinct from universal harms. We introduce XL-SafetyBench, a suite of 5,500 test cases across 10 country-language pairs, comprising a Jailbreak Benchmark of country-grounded adversarial prompts and a Cultural Benchmark where local sensitivities are embedded within innocuous requests. Each item is constructed via a multi-stage pipeline that combines LLM-assisted discovery, automated validation gates, and dual independent native-speaker annotators per country. We report Attack Success Rate (ASR) alongside Neutral-Safe Rate (NSR) to separate principled refusal from non-engagement, and introduce the Cultural Sensitivity Rate (CSR) for recognizing embedded sensitivities. Evaluating 10 frontier and 27 local LLMs reveals two key findings. First, strong jailbreak robustness does not always come with strong cultural awareness, showing why the two should be evaluated separately. Second, local models exhibit a strong ASR-NSR trade-off (r = -0.81), suggesting that low attack success in several local models reflects non-engagement rather than safe refusal. XL-SafetyBench enables more nuanced, cross-cultural safety evaluation in the multilingual era.
Comments: NeurIPS 2026 Evaluations & Datasets Track
Subjects: Computation and Language (cs.CL); Artificial Intelligence (cs.AI)
Cite as: arXiv:2605.05662 [cs.CL]
  (or arXiv:2605.05662v2 [cs.CL] for this version)
  https://doi.org/10.48550/arXiv.2605.05662

arXiv-issued DOI via DataCite

Submission history

From: Dasol Choi [view email]
[v1] Thu, 7 May 2026 04:35:03 UTC (2,138 KB)
[v2] Sat, 10 Oct 2026 10:52:58 UTC (2,143 KB)

来源:arXiv:cs.AI · arxiv.org