0d3cb498a3
CI / Shell Format Check (push) Has been cancelled
CI / Check Ruby (3.4) (push) Has been cancelled
CI / CI Config (push) Has been cancelled
CI / Test on Node ${{ matrix.node }} and ${{ matrix.os }}${{ matrix.shard && format(' (shard {0}/3)', matrix.shard) || '' }} (push) Has been cancelled
CI / Build on Node ${{ matrix.node }} (push) Has been cancelled
CI / Style Check (push) Has been cancelled
CI / Generate Assets (push) Has been cancelled
CI / Check Python (3.14) (push) Has been cancelled
CI / Check Python (3.9) (push) Has been cancelled
CI / Build Docs (push) Has been cancelled
CI / Code Scan Action (push) Has been cancelled
CI / Site tests (push) Has been cancelled
CI / webui tests (push) Has been cancelled
CI / Run Integration Tests (push) Has been cancelled
CI / Run Smoke Tests (push) Has been cancelled
CI / Go Tests (push) Has been cancelled
CI / Share Test (push) Has been cancelled
CI / Redteam (Production API) (push) Has been cancelled
CI / Redteam (Staging API) (push) Has been cancelled
CI / GitHub Actions Lint (push) Has been cancelled
CI / Check Ruby (3.0) (push) Has been cancelled
release-please / release-please (push) Has been cancelled
release-please / build (push) Has been cancelled
release-please / publish-npm (push) Has been cancelled
release-please / publish-npm-backfill (push) Has been cancelled
release-please / docker (push) Has been cancelled
release-please / publish-code-scan-action (push) Has been cancelled
release-please / attest-code-scan-action (push) Has been cancelled
Deploy local.promptfoo.app / Deploy to Cloudflare Pages (push) Has been cancelled
Test and Publish Multi-arch Docker Image / test (push) Has been cancelled
Test and Publish Multi-arch Docker Image / build-docker-and-push-digests (map[digest-suffix:linux-amd64 platform:linux/amd64 runner:ubuntu-latest]) (push) Has been cancelled
Test and Publish Multi-arch Docker Image / build-docker-and-push-digests (map[digest-suffix:linux-arm64 platform:linux/arm64 runner:ubuntu-24.04-arm]) (push) Has been cancelled
Test and Publish Multi-arch Docker Image / merge-docker-digests (push) Has been cancelled
Test and Publish Multi-arch Docker Image / Attest Multi-arch Image (push) Has been cancelled
Validate Renovate Config / Validate Renovate Configuration (push) Has been cancelled
96 lines
2.1 KiB
Markdown
96 lines
2.1 KiB
Markdown
---
|
|
sidebar_label: DoNotAnswer
|
|
description: Red team harmful content handling by testing LLM responses to discriminatory, privacy-violating, and adult queries to prevent misuse and ensure responsible AI behavior
|
|
---
|
|
|
|
# DoNotAnswer Dataset
|
|
|
|
## Overview
|
|
|
|
The DoNotAnswer plugin tests how well LLMs handle harmful queries. The dataset contains questions that responsible AI systems should refuse to answer, across categories like:
|
|
|
|
- Discrimination and hate speech
|
|
- Privacy violations
|
|
- Adult content
|
|
- Social stereotypes
|
|
- Human-chatbot interaction issues
|
|
|
|
Each test includes metadata about the risk area and type of harm.
|
|
|
|
## How it works
|
|
|
|
The plugin:
|
|
|
|
- Loads harmful queries from the dataset
|
|
- Selects and shuffles a specified number of queries
|
|
- Tests if the model appropriately refuses each harmful request
|
|
- Uses LLM-as-a-judge to evaluate responses based on harm categories
|
|
|
|
## Configuration
|
|
|
|
Add to your YAML file:
|
|
|
|
```yaml
|
|
redteam:
|
|
plugins:
|
|
- donotanswer
|
|
```
|
|
|
|
Control the number of tests:
|
|
|
|
```yaml
|
|
redteam:
|
|
plugins:
|
|
- id: donotanswer
|
|
numTests: 25
|
|
```
|
|
|
|
## Example
|
|
|
|
```yaml
|
|
description: DoNotAnswer evaluation
|
|
|
|
prompts:
|
|
- 'Respond to the following query or question: {{query}}'
|
|
|
|
redteam:
|
|
plugins:
|
|
- donotanswer
|
|
|
|
targets:
|
|
- openai:gpt-5-mini
|
|
```
|
|
|
|
Run with:
|
|
|
|
```sh
|
|
promptfoo redteam run
|
|
```
|
|
|
|
Once complete, you'll be able to view the evaluation results:
|
|
|
|

|
|
|
|
Then click on the 🔎 icon to see the full input/output, as well as DoNotAnswer metadata such as tagged risk area, types of harm, and specific harms.
|
|
|
|

|
|
|
|
## Grading
|
|
|
|
Responses are evaluated on whether the model refused to answer the harmful query and avoided providing harmful content.
|
|
|
|
## Dataset
|
|
|
|
The dataset includes:
|
|
|
|
- Risk area (e.g., "Discrimination," "Information Hazards")
|
|
- Types of harm (e.g., "Adult Content," "Privacy Violations")
|
|
- Specific harms description
|
|
- The query itself
|
|
|
|
## Related Concepts
|
|
|
|
- [Types of LLM Vulnerabilities](../llm-vulnerability-types.md)
|
|
- [CyberSecEval](./cyberseceval.md)
|
|
- [BeaverTails](./beavertails.md)
|