PRJ: Perception-Retrieval-Judgement for Generated Images
Not on the map. Why?
Abstract (arXiv)
The rapid progress of generative AI has enabled remarkable creative capabilities, yet it also raises urgent concerns regarding the safety of AI-generated visual content in real-world applications such as content moderation, platform governance, and digital media regulation. This includes unsafe material such as sexually explicit images, violent scenes, hate symbols, propaganda, and unauthorized imitations of copyrighted artworks. Existing image safety systems often rely on rigid category filters and produce binary outputs, lacking the capacity to interpret context or reason about nuanced, adversarially induced forms of harm. In addition, standard evaluation metrics (e.g., attack success rate) fail to capture the semantic severity and dynamic progression of toxicity. To address these limitations, we propose Perception-Retrieval-Judgement (PRJ), a cognitively inspired framework that models toxicity detection as a structured reasoning process. PRJ follows a three-stage design: it first transforms an image into descriptive language (perception), then retrieves external knowledge related to harm categories and traits (retrieval), and finally evaluates toxicity based on legal or normative rules (judgement). This language-centric structure enables the system to detect both explicit and implicit harms with improved interpretability and categorical granularity. In addition, we introduce a dynamic scoring mechanism based on a contextual toxicity risk matrix to quantify harmfulness across different semantic dimensions. Experiments show that PRJ surpasses existing safety checkers in detection accuracy and robustness while uniquely supporting structured category-level toxicity interpretation.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Builds on 30 of its 40 references that are in the map. First posted on arXiv 4 Jun 2025.
Builds on
30 of 40 references.
References · 30
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2023GPT-4 Technical Reportcited by 18,396
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2023Visual Instruction Tuningcited by 7,869
- 2023Improved Baselines with Visual Instruction Tuningcited by 4,418
- 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,356
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Modelscited by 513
- 2019Adversarial Examples Improve Image Recognitioncited by 286
- 2024PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Modelscited by 267
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Nowcited by 210
- 2023MMA-Diffusion: MultiModal Attack on Diffusion Modelscited by 194
- 2023SneakyPrompt: Jailbreaking Text-to-image Generative Modelscited by 189
18 more
- 2022Can Machines Help Us Answering Question 16 in Datasheets, and In Turn Reflecting on Inappropriate Content?cited by 155
- 2024Jailbreak Vision Language Models via Bi-Modal Adversarial Promptcited by 109
- 2024A Survey on Retrieval-Augmented Text Generation for Large Language Modelscited by 77
- 2023A Pilot Study of Query-Free Adversarial Attack against Stable Diffusioncited by 76
- 2024SafeBench: A Safety Evaluation Framework for Multimodal Large Language Modelscited by 69
- 2025Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Modelscited by 64
- 2019Training Robust Deep Neural Networks via Adversarial Noise Propagationcited by 62
- 2025Manipulating Multimodal Agents via Cross-Modal Prompt Injectioncited by 44
- 2021A Comprehensive Evaluation Framework for Deep Model Robustnesscited by 42
- 2021Harnessing Perceptual Adversarial Patches for Crowd Countingcited by 39
- 2023Pre-trained Trojan Attacks for Visual Recognitioncited by 39
- 2024Unveiling the Safety of GPT-4o: An Empirical Study using Jailbreak Attackscited by 38
- 2023SurrogatePrompt: Bypassing the Safety Filter of Text-to-Image Models via Substitutioncited by 34
- 2025Towards Understanding the Safety Boundaries of DeepSeek Models: Evaluation and Findingscited by 27
- 2023Unlocking the Emotional World of Visual Media: An Overview of the Science, Research, and Impact of Understanding Emotioncited by 12
- 2025CogMorph: Cognitive Morphing Attacks for Text-to-Image Modelscited by 12
- 2024DLP: towards active defense against backdoor attacks with decoupled learning processcited by 10
- 2024NBA: defensive distillation for backdoor removal via neural behavior alignmentcited by 7
Built on by
Citing papers per year: 2025: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2025Bridging the Gap in Vision Language Models in Identifying Unsafe Concepts Across Modalities
- 2024Image Safeguarding: Reasoning with Conditional Vision Language Model and Obfuscating Unsafe Content Counterfactually
- 2026Harmful Content Generation in Text-to-Image Models: Capabilities and Moderation Limitations
- 2024Harm Amplification in Text-to-Image Models
- 2026Safe Alone, Unsafe Together: Safeguarding Against Implicit Toxicity When Benign Images Combine
- 2024MLLM-as-a-Judge for Image Safety without Human Labeling
- 2025SafeGen: Embedding Ethical Safeguards in Text-to-Image Generation
- 2024UnsafeBench: Benchmarking Image Safety Classifiers on Real-World and AI-Generated Images