VARM-Bench - Harmfulness Label: leaderboard
Metric: Macro-F1 (%) of the harmful or non-harmful label; deduplicated 1,600-item test set of Chinese social-media posts and comments; the model writes one rationale with six anchored decisions (target, target type, target explicitness, author stance, harmfulness label, fine-grained category) that a deterministic parser scores, unparseable outputs counting as wrong; deterministic decoding; zero-shot prompt. Source: arxiv.org. Saturation forecast: Estimated already saturated. 6 models tracked.
Top models
| # | Model | Score |
|---|---|---|
| 1 | GPT-5.5 | 97.6 |
| 2 | Qwen 3.7 Max | 96.9 |
| 3 | DeepSeek V4 Pro | 95.6 |
Interactive version: theaggregate.ai/benchmark?slug=varm-bench-harmfulness-label · How It Works · Data refreshed daily, snapshot 2026-09-29.