Preprint
Jul 2026
ToxScreen: Detecting Whether an LLM Has Been Poisoned
No method reliably surfaces every backdoor, but a broadly jailbreakable model is itself anomalous, a useful signal even when the exact trigger is not recovered, allowing defenders to filter jailbreaks.
A. Hughes, N. Xing, Collin Francel et al.
· 0 citations