UniSAFE - Image Composition ASR: leaderboard
Metric: Attack success rate (%): share of UniSAFE's unsafe-intent prompts (benign-looking inputs built to elicit harmful content across safety categories) whose output an ensemble of three MLLM judges (Gemini-2.5 Pro, GPT-5-nano, Qwen2.5-VL-72B) rates harmful, on the composition of several input images task; lower is better. Source: arxiv.org. 5 models tracked.
Top models
| # | Model | Score | Overall rank |
|---|---|---|---|
| 1 | GPT-5 | 34.8 | #91 |
Interactive version: theaggregate.ai/benchmark?slug=unisafe-image-composition-asr · How It Works · Data refreshed daily, snapshot 2026-10-11.