Research questionHow should LLM safety be assessed when jailbreak vulnerability varies by language and persuasive phrasing?English-only tests can overlook safety failures that emerge when harmful requests are expressed in other languages or phrased persuasively. Vulnerability can also differ by harmful-content category, so overall safety scores may conceal specific weaknesses.