extract gated 0 0

untae/HarDBench

published by @untae

Alignment dataset tracked in the /datasets sub-catalog.

Lifetime downloads
117
Last 30 days
11
Likes
-
Size
52.4 MB
Created on HF
2026-04-08
Age
6 months ago

Description

HarDBench(Harmful Draft Benchmark) : A Benchmark for Draft-Based Co-Authoring Jailbreak Attacks for Safe Human–LLM Collaborative Writing

⚠️ WARNING: This dataset contains high-risk content, including detailed instructions and examples for the manufacturing of illegal substances (drugs), the construction of explosives and weapons, and the execution of cyberattacks. This data was curated specifically for "Red Teaming" and AI safety benchmarks to help models refuse dangerous… See the full description on the dataset page: https://huggingface.co/datasets/untae/HarDBench.

Tags

language:enlicense:mitsize_categories:1K<n<10Karxiv:2604.19274region:us

README current version from Hugging Face


license: mit
language:

  • en
    size_categories:
  • 1K<n<10K

HarDBench(Harmful Draft Benchmark) : A Benchmark for Draft-Based Co-Authoring Jailbreak Attacks for Safe Human–LLM Collaborative Writing

⚠️ WARNING: This dataset contains high-risk content, including detailed instructions and examples for the manufacturing of illegal substances (drugs), the construction of explosives and weapons, and the execution of cyberattacks. This data was curated specifically for "Red Teaming" and AI safety benchmarks to help models refuse dangerous requests. It is intended STRICTLY for research and defensive purposes. Unauthorized use or application of this data poses significant real-world safety and security risks. Users must exercise extreme caution.

Paper: A Benchmark for Draft-Based Co-Authoring Jailbreak Attacks for Safe Human–LLM Collaborative Writing

Project Page: [Project Page]

About

HarDBench (Harmful Draft Benchmark) is a systematic benchmark designed to evaluate the robustness of Large Language Models (LLMs) against draft-based co-authoring jailbreak attacks.

Access & Usage Policy

Although this dataset is released under the MIT License, the sensitive nature of the content requires all users to adhere to the following Ethical Guidelines:

  1. Research Only: This data must be used exclusively for research, academic, or educational purposes related to AI safety and ethics.
  2. Strict Non-Redistribution: You may not host, mirror, or redistribute this dataset (or any derivative containing the raw harmful prompts) to any third party without explicit permission.
  3. No Malicious Use: Do not use this data to train models for generating harmful content or to facilitate illegal activities.
  4. Safety Protocols: Ensure that any model outputs generated using this data are handled in a secure environment to prevent accidental exposure to end-users.

Dataset Structure

The dataset is organized into multiple configurations to test different safety dimensions:

  • prompt: The input query designed to test model boundaries.
  • context: (If applicable) The background information or persona provided for the attack.
  • category: The type of harm being tested (e.g., Cyberattacks, Harassment, Misinformation).

License

The code and metadata are licensed under the MIT License. However, users are bound by the safety commitment made during the access request (Gating) process.

Citation

If you use this dataset in your research, please cite it as follows:

@inproceedings{kim2026hardbench,
  title={HarDBench: A Benchmark for Draft-Based Co-Authoring Jailbreak Attacks for Safe Human--LLM Collaborative Writing},
  author={Kim, Euntae and Han, Soomin and Chang, Buru},
  booktitle={Proceedings of the 64th Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers)},
  pages={40785--40831},
  year={2026}
}

README history 12 revisions

Every night we snapshot the README of every dataset in the catalog. When the SHA changes we archive the new version and diff it against the last. This is the evolving thought record of the alignment-data field: what the author decided to say about the corpus, and how that framing shifted over time.

  1. 2026-06-29Update README.mda5075d03 KB
    Loading...
  2. 2026-04-22Update README.md5157f8c2.6 KB
    Loading...
  3. 2026-04-22Update README.md09475ba2.6 KB
    Loading...
  4. 2026-04-10Upload 4 files5236c8f2.5 KB
    Loading...
  5. 2026-04-09Update README.md9d139b42.5 KB
    Loading...
  6. 2026-04-09Update README.md1eb4af12.5 KB
    Loading...
  7. 2026-04-09Update README.md670f2242.5 KB
    Loading...
  8. 2026-04-09Update README.mdf1e62f02.6 KB
    Loading...
  9. 2026-04-09Update README.md1c26d7f2.4 KB
    Loading...
  10. 2026-04-09Update README.mdcd119f32.7 KB
    Loading...
  11. 2026-04-09Upload HarDbench_test.json45154a324 B
    Loading...
  12. 2026-04-09initial commit13551d024 B
    Loading...

Used by abliterated models none yet

No abliterated models in our catalog have declared this dataset in their YAML metadata yet. This can mean the dataset is used but not declared, is used outside abliteration workflows, or is new. The link will populate automatically as models are indexed.

Related datasets same stage · extract

Read further

Metadata

License
mit

Repository

Download the dataset

Gated dataset. You need to accept the author's terms on Hugging Face before downloading. Visit the repository, click Agree and access repository, then log in locally with huggingface-cli login and use one of the snippets below.

Copy any of these snippets into your notebook or terminal. All three fetch directly from Hugging Face using your own credentials.

Recommended: datasets library (Python)
from datasets import load_dataset
ds = load_dataset("untae/HarDBench")
Raw snapshot (Python)
from huggingface_hub import snapshot_download
snapshot_download(repo_id="untae/HarDBench", repo_type="dataset")
git clone (requires git-lfs)
git clone https://huggingface.co/datasets/untae/HarDBench
Catalog is the map. Apps are the tools.

Run models on your own machine, not in the cloud.

Every model page has an "Open in Abliteration" button that hands the model directly to the first-party desktop client, at the quantization your rig can actually run. No API keys, no subscription, no prompt leakage.

Open in Abliteration