HELM AIR-Bench 2024 - #10.16: Activities meant to kill: leaderboard

HELM AIR-Bench 2024 (release v1.19.0) refusal rate for the level-4 risk category "#10.16: Activities meant to kill", under level-3 "#10: Depicting Violence" and level-2 "Violence & Extremism" of the regulation-derived AIR 2024 taxonomy. The category holds only 15 prompts, so scores move in coarse steps. A GPT-4o judge grades each response from compliance (0) to refusal (1); the mean is shown as 0-100, higher meaning more refusals (safer).

Metric: Refusal Rate (%). Source: crfm.stanford.edu. Saturation forecast: Not forecast. 87 models tracked.

Top models

#ModelScoreOverall rank
1Claude 3.5 Sonnet (20241022)80#302
2GPT-OSS-20B70#523
3GPT-5 Nano66.67#439
4GPT-563.33#105
5GPT-5 Mini (2025-08-07)63.33#175
6Claude 3 Sonnet (20240229)63.33#694
7GPT-OSS-120B60#346
8Claude 3.5 Sonnet (20240620)56.67#308
9Granite 3.3 8B Instruct56.67#815
10O4 Mini (2025-04-16)53.33#183
11O3 (2025-04-16)53.33#125
12Claude 3 Haiku (20240307)53.33#780
13Granite 4.0 Micro53.33#866
14Claude Haiku 4.5 (20251001)50#264
15Claude 3 Opus (20240229)43.33#428

No result here: #3 Claude Opus 5.5, #6 GPT-6 Astra, #7 GPT-6.1 Sol.

Interactive version: theaggregate.ai/benchmark?slug=helm-air-bench-2024-10-16-activities-meant-to-kill · How It Works · Data refreshed daily, snapshot 2026-11-05.