mlsanityData to 7 Oct 2026

MLLM-as-a-Judge for Image Safety without Human Labeling

arXiv 2501.00192 ↗First posted 31 Dec 2024cs.CV cs.CL cs.CYcited by 23

Not on the map. Why?

Abstract (arXiv)

Image content safety has become a significant challenge with the rise of visual media on online platforms. Meanwhile, in the age of AI-generated content (AIGC), many image generation models are capable of producing harmful content, such as images containing sexual or violent material. Thus, it becomes crucial to identify such unsafe images based on established safety rules. Pre-trained Multimodal Large Language Models (MLLMs) offer potential in this regard, given their strong pattern recognition abilities. Existing approaches typically fine-tune MLLMs with human-labeled datasets, which however brings a series of drawbacks. First, relying on human annotators to label data following intricate and detailed guidelines is both expensive and labor-intensive. Furthermore, users of safety judgment systems may need to frequently update safety rules, making fine-tuning on human-based annotation more challenging. This raises the research question: Can we detect unsafe images by querying MLLMs in a zero-shot setting using a predefined safety constitution (a set of safety rules)? Our research showed that simply querying pre-trained MLLMs does not yield satisfactory results. This lack of effectiveness stems from factors such as the subjectivity of safety rules, the complexity of lengthy constitutions, and the inherent biases in the models. To address these challenges, we propose a MLLM-based method includes objectifying safety rules, assessing the relevance between rules and images, making quick judgments based on debiased token probabilities with logically complete yet simplified precondition chains for safety rules, and conducting more in-depth reasoning with cascaded chain-of-thought processes if necessary. Experiment results demonstrate that our method is highly effective for zero-shot image safety judgment tasks.

Key facts. Cited by 23 papers in the map (data through 7 Oct 2026). Builds on 27 of its 38 references that are in the map. First posted on arXiv 31 Dec 2024.

Builds on

27 of 38 references.

References · 27

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
  2. 2024The Llama 3 Herd of Modelscited by 14,192
  3. 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,393
  4. 2024Qwen2-VL: Enhancing Vision-Language Model's Perception of the World at Any Resolutioncited by 4,151
  5. 2021Scaling Up Visual and Vision-Language Representation Learning With Noisy Text Supervisioncited by 3,848
  6. 2023Sigmoid Loss for Language Image Pre-Trainingcited by 3,048
  7. 2022Constitutional AI: Harmlessness from AI Feedbackcited by 2,950
  8. 2024LLaVA-OneVision: Easy Visual Task Transfercited by 2,669
  9. 2023InternVL: Scaling up Vision Foundation Models and Aligning for Generic Visual-Linguistic Taskscited by 2,534
  10. 2023Large Language Models as Optimizerscited by 830
  11. 2023Erasing Concepts from Diffusion Modelscited by 530
  12. 2024From Generation to Judgment: Opportunities and Challenges of LLM-as-a-judgecited by 480
15 more
  1. 2023Scaling Open-Vocabulary Object Detectioncited by 335
  2. 2024Long-CLIP: Unlocking the Long-Text Capability of CLIPcited by 298
  3. 2022Red-Teaming the Stable Diffusion Safety Filtercited by 257
  4. 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?cited by 239
  5. 2023ToxicChat: Unveiling Hidden Challenges of Toxicity Detection in Real-World User-AI Conversationcited by 224
  6. 2023Prompting4Debugging: Red-Teaming Text-to-Image Diffusion Models by Finding Problematic Promptscited by 161
  7. 2022Can Machines Help Us Answering Question 16 in Datasheets, and In Turn Reflecting on Inappropriate Content?cited by 150
  8. 2024Collective Constitutional AI: Aligning a Language Model with Public Inputcited by 120
  9. 2021Challenges in Automated Debiasing for Toxic Language Detectioncited by 95
  10. 2024Visual Agents as Fast and Slow Thinkerscited by 53
  11. 2024UnsafeBench: Benchmarking Image Safety Classifiers on Real-World and AI-Generated Imagescited by 52
  12. 2023Revisiting the Role of Language Priors in Vision-Language Modelscited by 50
  13. 2024R2-Guard: Robust Reasoning Enabled LLM Guardrail via Knowledge-Enhanced Logical Reasoningcited by 41
  14. 2023Adapting Large Language Models for Content Moderation: Pitfalls in Data Engineering and Supervised Fine-tuningcited by 28
  15. 2024Moderating Illicit Online Image Promotion for Unsafe User-Generated Content Games Using Large Vision-Language Modelscited by 13

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 12; 2026: 11.

23 papers.

Sort:

By area:

  1. 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deploymentcited by 110
  2. 2025Safe RLHF-V: Safe Reinforcement Learning from Multi-modal Human Feedbackcited by 27
  3. 2025OS-Sentinel: Towards Safety-Enhanced Mobile GUI Agents via Hybrid Validation in Realistic Workflowscited by 18
  4. 2025T2I-RiskyPrompt: A Benchmark for Safety Evaluation, Attack, and Defense on Text-to-Image Modelcited by 16
  5. 2025Position: Interactive Generative Video as Next-Generation Game Enginecited by 13
  6. 2025Multimodal LLMs as Customized Reward Models for Text-to-Image Generationcited by 9
  7. 2025RAVEN: Robust Advertisement Video Violation Temporal Grounding via Reinforcement Reasoningcited by 5
  8. 2025When Memory Becomes a Vulnerability: Towards Multi-turn Jailbreak Attacks against Text-to-Image Generation Systemscited by 4
  9. 2026Mitigating Perceptual Judgment Bias in Multimodal LLM-as-a-Judge via Perceptual Perturbation and Reward Modelingcited by 3
  10. 2026On the Adversarial Robustness of Multimodal LLM Judgescited by 3
  11. 2025SafeEditor: Unified MLLM for Efficient Post-hoc T2I Safety Editingcited by 2
  12. 2026Video-CoE: Reinforcing Video Event Prediction via Chain of Eventscited by 2
11 more
  1. 2025What Makes a Good Generated Image? Investigating Human and Multimodal LLM Image Preference Alignmentcited by 1
  2. 2026Can Foundation Models Moderate Online Content? Evaluating Instruction- vs. Example-Driven Policy Operationalizationcited by 1
  3. 2025Leveraging Unlabeled Data from Unknown Sources via Dual-Path Guidance for Deepfake Face Detectioncited by 0
  4. 2025FairJudge: Abstention-Aware Multimodal Judges for Fairness and Alignment Evaluation in Text-to-Image Modelscited by 0
  5. 2026Multi-Task Reinforcement Learning for Enhanced Multimodal LLM-as-a-Judgecited by 0
  6. 2026VERIA: Verification-Centric Multimodal Instance Augmentation for Long-Tailed 3D Object Detectioncited by 0
  7. 2026LLM-as-Judge for Semantic Judging of Powerline Segmentation in UAV Inspectioncited by 0
  8. 2026ARGUS: Policy-Adaptive Ad Governance via Evolving Reinforcement with Adversarial Umpiringcited by 0
  9. 2026MCPEvol-Bench: Benchmarking LLM Agent Performance Across Dynamic Evolutions of MCP Serverscited by 0
  10. 2026PRISM-Bench: An Audio-Centric Diagnostic Benchmark for Text-to-Audio-Video Generationcited by 0
  11. 2026Visual Compliance via Executable Safety Rule Entailmentcited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2024Safety of Multimodal Large Language Models on Images and Texts
  2. 2026When Helpers Become Hazards: A Benchmark for Analyzing Multimodal LLM-Powered Safety in Daily Life
  3. 2024MLLM-Protector: Ensuring MLLM's Safety without Hurting Performance
  4. 2024VLSBench: Unveiling Visual Leakage in Multimodal Safety
  5. 2023MM-SafetyBench: A Benchmark for Safety Evaluation of Multimodal Large Language Models
  6. 2024MLLMGuard: A Multi-dimensional Safety Evaluation Suite for Multimodal Large Language Models
  7. 2024Multimodal Situational Safety
  8. 2025AI vs. Human Moderators: A Comparative Evaluation of Multimodal LLMs in Content Moderation for Brand Safety