The Target Agent Is Its Own Best Critic but a Poor Proposer: Self-Improved Red Teaming

Mintong Kang, Stephen Rawls, Melissa Kazemi Rad +2

Automatic red teaming increasingly relies on large language models (LLMs) to iteratively diagnose failed attacks and propose improved adversarial prompts or injections. Although pr…