mlsanityData to 14 Oct 2026

From Seed to Harvest: Augmenting Human Creativity with AI for Red-teaming Text-to-Image Models

arXiv 2507.17922 ↗First posted 23 Jul 2025cs.LG cs.AIcited by 0

On the map: LLM safety and security → Vision-language and text-to-image safety

Abstract (arXiv)

Text-to-image (T2I) models have become prevalent across numerous applications, making their robust evaluation against adversarial attacks a critical priority. Continuous access to new and challenging adversarial prompts across diverse domains is essential for stress-testing these models for resilience against novel attacks from multiple vectors. Current techniques for generating such prompts are either entirely authored by humans or synthetically generated. On the one hand, datasets of human-crafted adversarial prompts are often too small in size and imbalanced in their cultural and contextual representation. On the other hand, datasets of synthetically-generated prompts achieve scale, but typically lack the realistic nuances and creative adversarial strategies found in human-crafted prompts. To combine the strengths of both human and machine approaches, we propose Seed2Harvest, a hybrid red-teaming method for guided expansion of culturally diverse, human-crafted adversarial prompt seeds. The resulting prompts preserve the characteristics and attack patterns of human prompts while maintaining comparable average attack success rates (0.31 NudeNet, 0.36 SD NSFW, 0.12 Q16). Our expanded dataset achieves substantially higher diversity with 535 unique geographic locations and a Shannon entropy of 7.48, compared to 58 locations and 5.28 entropy in the original dataset. Our work demonstrates the importance of human-machine collaboration in leveraging human creativity and machine computational capacity to achieve comprehensive, scalable red-teaming for continuous T2I model safety evaluation.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Vision-language and text-to-image safety, one of 12 directions in LLM safety and security. Builds on 41 of its 58 references that are in the map. First posted on arXiv 23 Jul 2025.

Builds on

41 of 58 references.

Closest ancestors · 1

Same direction, newest first

  1. 2024Adversarial Nibbler: An Open Red-Teaming Method for Identifying Diverse Harms in Text-to-Image Generation14 Feb

Other references · 40

  1. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
  2. 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
  3. 2021Zero-Shot Text-to-Image Generationcited by 4,288
  4. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
  5. 2021A General Language Assistant as a Laboratory for Alignmentcited by 1,055
  6. 2022Red Teaming Language Models with Language Modelscited by 1,026
  7. 2019Adversarial NLI: A New Benchmark for Natural Language Understandingcited by 807
  8. 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learnedcited by 729
  9. 2024How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMscited by 573
  10. 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Modelscited by 513
  11. 2024AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Basescited by 429
  12. 2018Improving fairness in machine learning systems: What do industry practitioners need?cited by 262
28 more
  1. 2022Easily Accessible Text-to-Image Generation Amplifies Demographic Stereotypes at Large Scalecited by 262
  2. 2023Stable Bias: Analyzing Societal Representations in Diffusion Modelscited by 226
  3. 2020Learning from the Worst: Dynamically Generated Datasets to Improve Online Hate Detectioncited by 221
  4. 2023Scalable and Transferable Black-Box Jailbreaks for Language Models via Persona Modulationcited by 214
  5. 2023MMA-Diffusion: MultiModal Attack on Diffusion Modelscited by 194
  6. 2019Build it Break it Fix it for Dialogue Safety: Robustness from Adversarial Human Attackcited by 176
  7. 2021MultiVerS: Improving scientific claim verification with weak supervision and full-document contextcited by 143
  8. 2023Social Biases through the Text-to-Image Generation Lenscited by 127
  9. 2021Re-imagining Algorithmic Fairness in India and Beyondcited by 104
  10. 2023DICES Dataset: Diversity in Conversational AI Evaluation for Safetycited by 86
  11. 2023Typology of Risks of Generative Text-to-Image Modelscited by 55
  12. 2023AART: AI-Assisted Red-Teaming with Diverse Data Generation for New LLM-powered Applicationscited by 54
  13. 2024Learning diverse attacks on large language models for robust red-teaming and safety tuningcited by 54
  14. 2021Dynaboard: An Evaluation-As-A-Service Platform for Holistic Next-Generation Benchmarkingcited by 53
  15. 2021Everyday algorithm auditing: Understanding the power of everyday users in surfacing harmful algorithmic behaviorscited by 50
  16. 2021Hatemoji: A Test Suite and Adversarially-Generated Dataset for Benchmarking and Detecting Emoji-based Hatecited by 50
  17. 2023Supporting Human-AI Collaboration in Auditing LLMs with LLMscited by 46
  18. 2023Inspecting the Geographical Representativeness of Images from Text-to-Image Modelscited by 44
  19. 2024The Perspectivist Paradigm Shift: Assumptions and Challenges of Capturing Human Labelscited by 38
  20. 2022Understanding Practices, Challenges, and Opportunities for User-Engaged Algorithm Auditing in Industry Practicecited by 32
  21. 2024Diverse and Effective Red Teaming with Auto-generated Rewards and Multi-step Reinforcement Learningcited by 25
  22. 2023Auditing Gender Presentation Differences in Text-to-Image Modelscited by 22
  23. 2022Cultural Incongruencies in Artificial Intelligencecited by 21
  24. 2024Attack Atlas: A Practitioner's Perspective on Challenges and Pitfalls in Red Teaming GenAIcited by 16
  25. 2024Harm Amplification in Text-to-Image Modelscited by 15
  26. 2023The Empty Signifier Problem: Towards Clearer Paradigms for Operationalising "Alignment" in Large Language Modelscited by 7
  27. 2018Trick Me If You Can: Human-in-the-loop Generation of Adversarial Examples for Question Answeringcited by 6
  28. 2024The Psychosocial Impacts of Generative AI Harmscited by 4

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2024Red-Teaming Text-to-Image Models via In-Context Experience Replay and Semantic-Preserving Prompt Rewriting
  2. 2024ART: Automatic Red-teaming for Text-to-Image Models to Protect Benign Users
  3. 2025AutoPrompt: Automated Red-Teaming of Text-to-Image Models via LLM-Driven Adversarial Prompts
  4. 2025GenBreak: Red Teaming Text-to-Image Generators Using Large Language Models
  5. 2025DREAM: Scalable Red Teaming for Text-to-Image Generative Systems via Distribution Modeling
  6. 2026RISE: Red-teaming via Iterative Strategy Evolution for Modern Text-to-Image Models
  7. 2024Rainbow Teaming: Open-Ended Generation of Diverse Adversarial Prompts
  8. 2026Automatic Red Teaming for Implicit Vulnerabilities of Text-to-Image Models