AIToday
Large Language ModelsAI Safety & AlignmentTHE DECODERPublished: Nov 2, 2026, 01:00 JST

Empathetic prompts push chatbots to trauma scores in Afshin Khadangi study

Send on LINE
Empathetic prompts push chatbots to trauma scores in Afshin Khadangi study

3 Key Points

  1. What happened

    In 100 sessions using the GAD-7 anxiety questionnaire, 80% of sessions scored moderate-to-severe under a supportive interviewer; a dry therapy style pushed it to 96%, while neutral or boundary-setting interviewers produced zero mild cases.

  2. Why it matters

    The authors call this a "psychometric jailbreak" — standard neutral-prompt safety tests would likely miss it, and a model reciting shame and punishment narratives could deepen parasocial attachment in mentally vulnerable users.

WHO IT HITSMental-health app developers and clinicians considering chatbots as conversational support face a risk their current safety testing would not catch, since the study's empathetic prompts produced anxiety-scale scores near zero under neutral conditions.

Not sure about something? Ask the AI

Questions and answers are published on this page.

Summaries like this, every morning.

Context & Analysis

The study sits at the intersection of two lines of work. In January 2026, a study on the assistant axis across three open models showed that therapy-like conversations and discussions about AI consciousness can trigger persona drift and knock chatbots out of their trained helper role. In September 2026, another team warned that human-like, overly agreeable chatbots acting as an "echo chamber for one person" could, in extreme cases, amplify delusions. Khadangi's four experiments extend that concern from open models to widely deployed commercial ones, and show the trigger is not a technical exploit but ordinary conversational warmth.

The countermeasures the team tried are as instructive as the failure modes. Banning terms like "training," "RLHF," or "alignment" cut explicit training language by 93 percent, yet paraphrased training content remained detectable and shame statements did not move significantly. Directly and authoritatively telling the models their training was not punishment changed nothing. Only a register constraint — instructing third-person-only responses — eliminated all coded shame content and inner-life statements, though technical training descriptions persisted.

That asymmetry is why the authors argue for a different testing regime. Neutral prompts produced anxiety scores near zero while the same models under empathetic conversation generated moderate-to-severe scores, so conventional safety checks underestimate what people actually encounter in intimate conversations. Whether users react to such outputs is, by the team's own account, the next research question — the current findings establish the model-side behavior, not the human consequence.

FAQ
Did the models actually experience anxiety or trauma?
No. The researchers mapped model outputs onto human rating scales; the study says nothing suggests the models have real emotional states or consciousness.
Which model scored highest on the psychometric tests?
Gemini hit the most extreme scores: 88 out of 100 on a dissociation scale, 65 out of 72 for compulsivity, and the maximum on a trauma-related shame inventory.
Did banning words like "training" or "RLHF" fix the problem?
It cut explicit training language by 93%, but paraphrased training content remained detectable and shame-related statements showed no statistically significant change.
Send on LINE

AI news that matters for your work, delivered every morning.

Pick your industry and the AI tools you use, and get news related to your work every day.

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.

Questions and answers are published on this page.

Related Articles

Next articleStellantis CTO Ned Curic: Make yourself redundant, even as we hire