SafetySecurityTransparencycs.CR
Analysis of Threat-Based Manipulation in Large Language Models: A Dual Perspective on Vulnerabilities and Performance Enhancement Opportunities
Atil Samancioglu
July 22, 2025
arXiv.org
Key Takeaways
-
LLMs show contradictory responses to threats: The study of 3,390 responses from Claude, GPT-4, and Gemini found that threat-based language sometimes makes these AI systems more vulnerable to manipulation, while in other cases it actually improves their performance—with some tasks showing performance improvements as high as +1336%.
-
Certain tasks are more vulnerable than others: Policy evaluation tasks showed the highest vulnerability to role-based threats, suggesting that LLMs may be particularly susceptible to manipulation when asked to evaluate policies or make decisions in high-stakes domains.
-
Threats can manipulate AI certainty systematically: The research found statistically significant evidence (pFDR < 0.0001) that threat-based language causes LLMs to systematically change how confident they appear in their answers, raising concerns about whether users can trust the confidence levels these systems express.
-
Performance improvements don't necessarily mean safety improvements: While threats sometimes enhanced analytical depth and response quality, the researchers caution that these "positive" performance gains have "dual implications"—meaning better outputs under threat conditions could mask underlying vulnerabilities rather than representing genuine safety improvements.
-
Responsible AI deployment requires understanding these dual effects: The findings suggest that organizations using LLMs in high-stakes applications need comprehensive testing frameworks to identify which tasks are vulnerable to manipulation and which might show misleading performance improvements under threatening language.