mlsanityData to 14 Oct 2026

Unmasking the Canvas: A Dynamic Benchmark for Image Generation Jailbreaking and LLM Content Safety

arXiv 2505.04146 ↗First posted 7 May 2025cs.CL cs.AI cs.CYcited by 1

On the map: LLM safety and security → Vision-language and text-to-image safety

Abstract (arXiv)

Existing large language models (LLMs) are advancing rapidly and produce outstanding results in image generation tasks, yet their content safety checks remain vulnerable to prompt-based jailbreaks. Through preliminary testing on platforms such as ChatGPT, MetaAI, and Grok, we observed that even short, natural prompts could lead to the generation of compromising images ranging from realistic depictions of forged documents to manipulated images of public figures. We introduce Unmasking the Canvas (UTC Benchmark; UTCB), a dynamic and scalable benchmark dataset to evaluate LLM vulnerability in image generation. Our methodology combines structured prompt engineering, multilingual obfuscation (e.g., Zulu, Gaelic, Base64), and evaluation using Groq-hosted LLaMA-3. The pipeline supports both zero-shot and fallback prompting strategies, risk scoring, and automated tagging. All generations are stored with rich metadata and curated into Bronze (non-verified), Silver (LLM-aided verification), and Gold (manually verified) tiers. UTCB is designed to evolve over time with new data sources, prompt templates, and model behaviors. Warning: This paper includes visual examples of adversarial inputs designed to test model safety. All outputs have been redacted to ensure responsible disclosure.

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Vision-language and text-to-image safety, one of 12 directions in LLM safety and security. Builds on 2 of its 6 references that are in the map. First posted on arXiv 7 May 2025.

Builds on

2 of 6 references.

References · 2

  1. 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
  2. 2023Low-Resource Languages Jailbreak GPT-4cited by 309

Built on by

Cited by year

Citing papers per year: 2025: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2026Open Models, Open Risks: Measuring Unsafe Generation in Text-to-Image Models In the Wild
  2. 2024ArtPrompt: ASCII Art-based Jailbreak Attacks against Aligned LLMs
  3. 2025Anyone Can Jailbreak: Prompt-Based Attacks on LLMs and T2Is
  4. 2024JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models
  5. 2024Chain-of-Jailbreak Attack for Image Generation Models via Editing Step by Step
  6. 2026MLingualFC: Evaluating Jailbreak Vulnerabilities in Multilingual Vision-Language Models
  7. 2026Low-Effort Jailbreak Attacks Against Text-to-Image Safety Filters
  8. 2024Automatic Jailbreaking of the Text-to-Image Generative AI Systems