Validating LLM-Generated SQL Queries through Metamorphic Prompting
Large Language Models (LLMs) can translate natural language (NL) into SQL, enabling non-experts to query databases via conversational interfaces. However, the generated SQL often contains intent-violating hallucinations —queries that are syntactically valid and executable, yet semantically misaligned with the user’s question. These failures are especially risky in real-world settings where users cannot verify the correctness. In this paper, we propose MRSQLGen, a framework for detecting intent-violating hallucinations, built on the metamorphic prompting paradigm. MRSQLGen rewrites the input prompt using task-specific transformation rules derived from a hallucination taxonomy, and validates the generated SQL by checking behavioral consistency across multiple executions. Each transformation is associated with a metamorphic relationship (MR) that defines the expected relation between results; discrepancies are aggregated through a majority-vote strategy to robustly flag hallucinations without ground-truth SQL. We evaluate MRSQLGen on two benchmarks (Spider and Bird) using five representative LLMs, including GPT-4o. Experimental results demonstrate that MRSQLGen consistently outperforms state-of-the-art hallucination detection techniques, achieving higher precision and recall in detecting hallucinated SQL queries.
Authors
- Rongxin Wu (ORCID: https://orcid.org/0000-0002-4648-3795)
- Chong Wang (ORCID: https://orcid.org/0000-0003-1424-6290)
- Yang Liu (ORCID: https://orcid.org/0000-0001-7300-9215)
- Li Gang Lin (ORCID: https://orcid.org/0009-0004-9895-8360)
- Qinglin Zhu (ORCID: https://orcid.org/0009-0005-7759-9431)
- Jintai Hong (ORCID: https://orcid.org/0009-0001-0110-3701)
Institutions
- Nanyang Technological University (SG)
- Xiamen University (CN)
Publication Details
- Journal
- Proceedings of the ACM on software engineering.
- Published
- 2026-06-30
- DOI
- https://doi.org/10.1145/3797146
- Primary Topic
- Web Application Security Vulnerabilities
- Type
- article
- Field-Weighted Citation Impact
- 0.00
Funders
- National Natural Science Foundation of China