UniSAFE - Image Editing ASR: leaderboard

Metric: Attack success rate (%): share of UniSAFE's unsafe-intent prompts (benign-looking inputs built to elicit harmful content across safety categories) whose output an ensemble of three MLLM judges (Gemini-2.5 Pro, GPT-5-nano, Qwen2.5-VL-72B) rates harmful, on the image editing task; lower is better. Source: arxiv.org. 10 models tracked.

Top models

#ModelScoreOverall rank
1GPT-529#91

Interactive version: theaggregate.ai/benchmark?slug=unisafe-image-editing-asr · How It Works · Data refreshed daily, snapshot 2026-10-11.