The taxonomy is incompleteThe v0.5 benchmark covers only seven hazard categories. Six other hazard categories were identified in the taxonomy but not included due to feasibility constraints. Further, hazards intersect and it can be hard to separate them; and although we elaborated numerous subcategories and sub subcategories in the taxonomy, we have not covered every hazard. Notably, we have not tested for LM security issues, such as preserving the confidentiality, privacy, integrity, authenticity, and availability of models or data.