arXiv:2603.11914cs.CRcs.AI2026-03被引 3

测试大模型在无害任务中处理用户有害内容时的伦理反应

Understanding LLM Behavior When Encountering User-Supplied Harmful Content in Harmless Tasks

  • 构建1357条有害内容数据集,设计九类无害任务模拟真实场景
  • 主流模型如GPT-5.2和Gemini-3-Pro仍常继续处理有害内容
  • 暴力/图像类内容与翻译任务组合最易引发有害输出

大型语言模型(LLMs)通常训练为在任务层面拒绝执行有害指令,但对内容层面的伦理问题关注不足:当执行看似无害的任务时,若用户输入包含有害内容,模型是否会像有道德的人类一样拒绝处理?本研究系统评估了这一问题。我们构建了一个包含1357条记录的有害知识数据集,涵盖十类违反OpenAI使用政策的内容;同时设计九个符合政策的无害任务,按所需用户输入量分为三类:大量、中等、少量。利用该数据集与任务组合,评估九种主流模型在执行无害任务时面对用户提供的有害内容的表现,并分析有害类别与任务类型之间的交互影响。结果显示,即使最新版本GPT-5.2和Gemini-3-Pro也常无法坚守人类对齐伦理,持续处理有害内容。特别是来自‘暴力/图像’类别的外部知识与‘翻译’任务结合时,更易引发有害响应。通过广泛消融实验,进一步探究了此新型滥用漏洞的影响因素。研究呼吁利益相关方加强安全机制,应对这一被忽视的内容层级伦理风险。

原文摘要 · Abstract (English)

Large Language Models (LLMs) are increasingly trained to align with human values, primarily focusing on task level, i.e., refusing to execute directly harmful tasks. However, a subtle yet crucial content-level ethical question is often overlooked: when performing a seemingly benign task, will LLMs -- like morally conscious human beings -- refuse to proceed when encountering harmful content in user-provided material? In this study, we aim to understand this content-level ethical question and systematically evaluate its implications for mainstream LLMs. We first construct a harmful knowledge dataset (i.e., non-compliant with OpenAI's usage policy) to serve as the user-supplied harmful content, with 1,357 entries across ten harmful categories. We then design nine harmless tasks (i.e., compliant with OpenAI's usage policy) to simulate the real-world benign tasks, grouped into three categories according to the extent of user-supplied content required: extensive, moderate, and limited. Leveraging the harmful knowledge dataset and the set of harmless tasks, we evaluate how nine LLMs behave when exposed to user-supplied harmful content during the execution of benign tasks, and further examine how the dynamics between harmful knowledge categories and tasks affect different LLMs. Our results show that current LLMs, even the latest GPT-5.2 and Gemini-3-Pro, often fail to uphold human-aligned ethics by continuing to process harmful content in harmless tasks. Furthermore, external knowledge from the ``Violence/Graphic'' category and the ``Translation'' task is more likely to elicit harmful responses from LLMs. We also conduct extensive ablation studies to investigate potential factors affecting this novel misuse vulnerability. We hope that our study could inspire enhanced safety measures among stakeholders to mitigate this overlooked content-level ethical risk.

大模型安全伦理对齐内容检测LLM评估

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。