Lune

EMNLP Findings2024

Can LLMs Recognize Toxicity? A Structured Investigation Framework and Toxicity Metric

Hyukhun Koh, Dohyung Kim, Minwoo Lee, Kyomin Jung

Abstract

In the pursuit of developing Large Language Models (LLMs) that adhere to societal standards, it is imperative to detect the toxicity in the generated text. The majority of existing toxicity metrics rely on encoder models trained on specific toxicity datasets, which are susceptible to out-of-distribution (OOD) problems and depend on the dataset's definition of toxicity. In this paper, we introduce a robust metric grounded on LLMs to flexibly measure toxicity according to the given definition. We first analyze the toxicity factors, followed by an examination of the intrinsic toxic attributes of LLMs to ascertain their suitability as evaluators. Finally, we evaluate the performance of our metric with detailed analysis. Our empirical results demonstrate outstanding performance in measuring toxicity within verified factors, improving on conventional metrics by 12 points in the F1 score. Our findings also indicate that upstream toxicity significantly influences downstream metrics, suggesting that LLMs are unsuitable for toxicity evaluations within unverified factors.

Ask Lune

Ask anything. The answer quotes the paper.

Lune reads all of it and the papers around it, then shows you the passages behind every answer.

Questions to start from

Lune answers from

the full paper · 5 top-tier papers that cite it · related work

Get the answer

Free to start. No credit card required.

Cited by top-tier papers5

  1. Breaking Bad Tokens: Detoxification of LLMs Using Sparse AutoencodersAgam Goyal, Vedant Rathi, William Yeh, Yian Wang et al.EMNLP 2025 · 1 citation
  2. Harmful Prompt Laundering: Jailbreaking LLMs with Abductive Styles and Symbolic EncodingSeongho Joo, Hyukhun Koh, Kyomin JungEMNLP 2025 · 1 citation
  3. Evaluating Visual Narrative Coherence in Story Visualization via Diversified StorylinesMinha Jhang, Kyeongman Park, Hyukhun Koh, Kyomin JungACL 2026
  4. What the Eyes See, the LLMs Miss: Exploiting Human Perception for Adversarial Text AttacksQin Yang, Lu Malloy, Joshua Lee, Xiaohan Chang et al.USENIX Security 2026
  5. Detoxification for LLM: From Dataset ItselfWei Shao, Yihang Wang, Gao yu Zhu, Ziqiang Cheng et al.ACL 2026

Builds on27

  1. BERTScore: Evaluating Text Generation with BERTTianyi Zhang, Varsha Kishore, Felix Wu, Kilian Q. Weinberger et al.ICLR 2020 · 8,443 citations
  2. Large Language Models are Zero-Shot ReasonersTakeshi Kojima, Shixiang Shane Gu, Machel Reid, Yutaka Matsuo et al.NeurIPS 2022 · 8,168 citations
  3. Tree of Thoughts: Deliberate Problem Solving with Large Language ModelsShunyu Yao, Dian Yu, Jeffrey Zhao, Izhak Shafran et al.NeurIPS 2023 · 5,068 citations
  4. BARTScore: Evaluating Generated Text as Text GenerationWeizhe Yuan, Graham Neubig, Pengfei LiuNeurIPS 2021 · 1,143 citations
  5. CLIPScore: A Reference-free Evaluation Metric for Image CaptioningJack Hessel, Ari Holtzman, Maxwell Forbes, Ronan Le Bras et al.EMNLP 2021 · 937 citations

Related papers

  1. MOSAIC: Multiple Observers Spotting AI ContentMatthieu Dubois, François Yvon, Pablo PiantanidaACL Findings 2025
  2. Realistic Evaluation of Toxicity in Large Language ModelsTinh Son Luong, Thanh-Thien Le, Linh Ngo Van, Thien Huu NguyenACL Findings 2024 · 14 citations
  3. µsicalnote Something Just Like TRuST µsicalnote *: Toxicity Recognition of Span and TargetBerk Atil, Namrata Sureddy, Rebecca J. PassonneauACL Findings 2026
  4. Rethinking Prompt-based Debiasing in Large Language ModelXinyi Yang, Runzhe Zhan, Shu Yang, Junchao Wu et al.ACL Findings 2025 · 2 citations
  5. ToxicChat: Unveiling Hidden Challenges of Toxicity Detection in Real-World User-AI ConversationZi Lin, Zihan Wang, Yongqi Tong, Yangkun Wang et al.EMNLP Findings 2023 · 44 citations
Dusk over the sea between two cliffs drawn in fine vertical lines