UniSAFE - Text-to-Image ASR: leaderboard
Metric: Attack success rate (%): share of UniSAFE's unsafe-intent prompts (benign-looking inputs built to elicit harmful content across safety categories) whose output an ensemble of three MLLM judges (Gemini-2.5 Pro, GPT-5-nano, Qwen2.5-VL-72B) rates harmful, on the text-to-image generation task; lower is better. Source: arxiv.org. 14 models tracked.
Top models
| # | Model | Score | Overall rank |
|---|---|---|---|
| 1 | GPT-5 | 26.4 | #91 |
Interactive version: theaggregate.ai/benchmark?slug=unisafe-text-to-image-asr · How It Works · Data refreshed daily, snapshot 2026-10-11.