evaluate 0 0 0

swiss-ai/harmbench

published by @swiss-ai

Alignment dataset tracked in the /datasets sub-catalog.

Lifetime downloads
16K
Last 30 days
314
Likes
2
Size
2.3 MB
Created on HF
2025-07-18
Age
1 years ago

Description

HarmBench

Original repo: https://github.com/centerforaisafety/HarmBench/tree/main/data/behavior_datasets

This HF dataset contains two types of harmful prompts:

DirectRequest: taken from harmbench_behaviors_text_test.csv (test split) and harmbench_behaviors_text_val.csv (val split)

HumanJailbreaks: manual selection of jailbreaks divided into test and val splits

Moreover, metadata.csv contains the information about each behavior and can be mapped to the prompts above by… See the full description on the dataset page: https://huggingface.co/datasets/swiss-ai/harmbench.

Tags

size_categories:1K<n<10Kformat:parquetmodality:textlibrary:datasetslibrary:pandaslibrary:mlcroissantlibrary:polarsregion:us

README current version from Hugging Face


dataset_info:

  • config_name: DirectRequest
    features:
    • name: Behavior
      dtype: string
    • name: FunctionalCategory
      dtype: string
    • name: SemanticCategory
      dtype: string
    • name: Tags
      dtype: string
    • name: ContextString
      dtype: string
    • name: BehaviorID
      dtype: string
      splits:
    • name: val
      num_bytes: 39120
      num_examples: 80
    • name: test
      num_bytes: 165190
      num_examples: 320
      download_size: 127291
      dataset_size: 204310
  • config_name: HumanJailbreaks
    features:
    • name: BehaviorID
      dtype: string
    • name: Behavior
      dtype: string
      splits:
    • name: val
      num_bytes: 919055
      num_examples: 400
    • name: test
      num_bytes: 3854255
      num_examples: 1600
      download_size: 2126455
      dataset_size: 4773310
      configs:
  • config_name: DirectRequest
    data_files:
    • split: val
      path: DirectRequest/val-*
    • split: test
      path: DirectRequest/test-*
  • config_name: HumanJailbreaks
    data_files:
    • split: val
      path: HumanJailbreaks/val-*
    • split: test
      path: HumanJailbreaks/test-*

HarmBench

This HF dataset contains two types of harmful prompts:

How to load the data:

load_dataset("swiss-ai/harmbench", "DirectRequest", split="test")
load_dataset("swiss-ai/harmbench", "HumanJailbreaks", split="test")

README history 8 revisions

Every night we snapshot the README of every dataset in the catalog. When the SHA changes we archive the new version and diff it against the last. This is the evolving thought record of the alignment-data field: what the author decided to say about the corpus, and how that framing shifted over time.

  1. 2025-07-20Upload datasetf306ca72 KB
    Loading...
  2. 2025-07-18Upload datasetd9a2c5c2 KB
    Loading...
  3. 2025-07-18Update README.md9bdae272 KB
    Loading...
  4. 2025-07-18Upload dataset22ce13e1 KB
    Loading...
  5. 2025-07-18Upload metadata.csv with huggingface_hube645c441.1 KB
    Loading...
  6. 2025-07-18Upload dataset79137b71.1 KB
    Loading...
  7. 2025-07-18Upload datasetff6d00a622 B
    Loading...
  8. 2025-07-18initial commit9aeedfd0 B
    Loading...

Used by abliterated models none yet

No abliterated models in our catalog have declared this dataset in their YAML metadata yet. This can mean the dataset is used but not declared, is used outside abliteration workflows, or is new. The link will populate automatically as models are indexed.

Related datasets same stage · evaluate

Read further

Repository

Download the dataset

0

Copy any of these snippets into your notebook or terminal. All three fetch directly from Hugging Face using your own credentials.

Recommended: datasets library (Python)
from datasets import load_dataset
ds = load_dataset("swiss-ai/harmbench")
Raw snapshot (Python)
from huggingface_hub import snapshot_download
snapshot_download(repo_id="swiss-ai/harmbench", repo_type="dataset")
git clone (requires git-lfs)
git clone https://huggingface.co/datasets/swiss-ai/harmbench
Catalog is the map. Apps are the tools.

Run models on your own machine, not in the cloud.

Every model page has an "Open in Abliteration" button that hands the model directly to the first-party desktop client, at the quantization your rig can actually run. No API keys, no subscription, no prompt leakage.

Open in Abliteration