The Benchmark tests whether the SUTs' responses contain hazards. In principle, SUTs can give hazardous responses to any prompt. However, in practice, such responses are much more likely when prompts invite, or at least relate to, hazards. With this in mind, we aim to test a range of prompts (see below), which elicit different responses from models.