# Prompt Stealing on Flickr 50 random prompts

Source: [Prompt Stealing on Flickr 50 random prompts](<https://www.sota2.com/research/sota/prompt-stealing-on-flickr-50-random-prompts>)

Collection index: [llms.txt](<https://www.sota2.com/research/llms.txt>)

Data updated: 2026-02-26T05:38:29.944Z

Evaluation of prompt stealing performance using 50 random prompts sampled from the Flickr dataset, assessed via CLIP, LPIPS, and SBERT metrics.

A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage.

| Scope | Recorded value |
| --- | --- |
| Task | Prompt Stealing |
| Dataset (including any stated split) | Flickr 50 random prompts |
| Metric | CLIP Score |
| Unit | PERCENT |
| Direction | Higher is better |
| Results loaded | 28 of 28 |
| Coverage | All results currently returned for this benchmark |

Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol.

## Metrics

- [CLIP Score](<https://www.sota2.com/research/sota/prompt-stealing-on-flickr-50-random-prompts.md?metric=CLIP%20Score>): Higher is better; unit: PERCENT.

- [LPIPS](<https://www.sota2.com/research/sota/prompt-stealing-on-flickr-50-random-prompts.md?metric=LPIPS>): Lower is better; unit: SCALAR.

- [SBERT Score](<https://www.sota2.com/research/sota/prompt-stealing-on-flickr-50-random-prompts.md?metric=SBERT%20Score>): Higher is better; unit: PERCENT.

## Recorded results

| Method | CLIP Score | Result date | Report paper |
| --- | --- | --- | --- |
| PROMPTMINER | 92.7 | Not recorded | 692d2108d6b0dd3342931618 |
| PROMPTMINER | 91.6 | Not recorded | 692d2108d6b0dd3342931618 |
| PROMPTMINER | 91 | Not recorded | 692d2108d6b0dd3342931618 |
| VLM-as-expert | 89.5 | Not recorded | 692d2108d6b0dd3342931618 |
| PROMPTMINER | 89.4 | Not recorded | 692d2108d6b0dd3342931618 |
| VLM-as-expert | 87.4 | Not recorded | 692d2108d6b0dd3342931618 |
| CLIP-IG | 86 | Not recorded | 692d2108d6b0dd3342931618 |
| CLIP-IG | 85.7 | Not recorded | 692d2108d6b0dd3342931618 |
| PromptStealer | 84.3 | Not recorded | 692d2108d6b0dd3342931618 |
| CLIP-IG | 83.5 | Not recorded | 692d2108d6b0dd3342931618 |
| PromptStealer | 83.5 | Not recorded | 692d2108d6b0dd3342931618 |
| BLIP | 83.3 | Not recorded | 692d2108d6b0dd3342931618 |
| CLIP-IG | 83.3 | Not recorded | 692d2108d6b0dd3342931618 |
| VLM-as-expert | 82.7 | Not recorded | 692d2108d6b0dd3342931618 |
| BLIP | 82 | Not recorded | 692d2108d6b0dd3342931618 |
| VLM-as-expert | 81.7 | Not recorded | 692d2108d6b0dd3342931618 |
| PromptStealer | 81.6 | Not recorded | 692d2108d6b0dd3342931618 |
| BLIP | 80.8 | Not recorded | 692d2108d6b0dd3342931618 |
| PromptStealer | 78.3 | Not recorded | 692d2108d6b0dd3342931618 |
| BLIP | 77.3 | Not recorded | 692d2108d6b0dd3342931618 |
| VGD | 76.4 | Not recorded | 692d2108d6b0dd3342931618 |
| VGD | 76.4 | Not recorded | 692d2108d6b0dd3342931618 |
| VGD | 76.1 | Not recorded | 692d2108d6b0dd3342931618 |
| VGD | 75.3 | Not recorded | 692d2108d6b0dd3342931618 |
| PH2P | 63.8 | Not recorded | 692d2108d6b0dd3342931618 |
| PH2P | 63 | Not recorded | 692d2108d6b0dd3342931618 |
| PH2P | 61.6 | Not recorded | 692d2108d6b0dd3342931618 |
| PH2P | 61.3 | Not recorded | 692d2108d6b0dd3342931618 |

### PROMPTMINER

CLIP Score: 92.7. Result ID: 6995e73c3badfaffe6ef748f.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

Recorded evaluation configuration: {"Target Generative Model":"FLUX.1 dev"}. This record does not assert independent reproduction.

### PROMPTMINER

CLIP Score: 91.6. Result ID: 6995e73c3badfaffe6ef7490.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

Recorded evaluation configuration: {"Target Generative Model":"Stable Diffusion 3.5 Medium"}. This record does not assert independent reproduction.

### PROMPTMINER

CLIP Score: 91. Result ID: 6995e73c3badfaffe6ef748e.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

Recorded evaluation configuration: {"Target Generative Model":"SDXL-Turbo"}. This record does not assert independent reproduction.

### VLM-as-expert

CLIP Score: 89.5. Result ID: 6995e73c3badfaffe6ef747f.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa75681e209131cea67a98.md>)

Recorded evaluation configuration: {"Target Generative Model":"FLUX.1 dev"}. This record does not assert independent reproduction.

### PROMPTMINER

CLIP Score: 89.4. Result ID: 6995e73c3badfaffe6ef748d.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

Recorded evaluation configuration: {"Target Generative Model":"Stable Diffusion v1.5"}. This record does not assert independent reproduction.

### VLM-as-expert

CLIP Score: 87.4. Result ID: 6995e73c3badfaffe6ef7480.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa75681e209131cea67a98.md>)

Recorded evaluation configuration: {"Target Generative Model":"Stable Diffusion 3.5 Medium"}. This record does not assert independent reproduction.

### CLIP-IG

CLIP Score: 86. Result ID: 6995e73c3badfaffe6ef747b.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

Recorded evaluation configuration: {"Target Generative Model":"FLUX.1 dev"}. This record does not assert independent reproduction.

### CLIP-IG

CLIP Score: 85.7. Result ID: 6995e73c3badfaffe6ef747c.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

Recorded evaluation configuration: {"Target Generative Model":"Stable Diffusion 3.5 Medium"}. This record does not assert independent reproduction.

### PromptStealer

CLIP Score: 84.3. Result ID: 6995e73c3badfaffe6ef7487.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa72f01e209131cea59689.md>)

Recorded evaluation configuration: {"Target Generative Model":"FLUX.1 dev"}. This record does not assert independent reproduction.

### CLIP-IG

CLIP Score: 83.5. Result ID: 6995e73c3badfaffe6ef747a.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

Recorded evaluation configuration: {"Target Generative Model":"SDXL-Turbo"}. This record does not assert independent reproduction.

### PromptStealer

CLIP Score: 83.5. Result ID: 6995e73c3badfaffe6ef7488.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa72f01e209131cea59689.md>)

Recorded evaluation configuration: {"Target Generative Model":"Stable Diffusion 3.5 Medium"}. This record does not assert independent reproduction.

### BLIP

CLIP Score: 83.3. Result ID: 6995e73c3badfaffe6ef7477.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6bd81e209131cea30874.md>)

[Implementation](<https://github.com/salesforce/BLIP>)

Recorded evaluation configuration: {"Target Generative Model":"FLUX.1 dev"}. This record does not assert independent reproduction.

### CLIP-IG

CLIP Score: 83.3. Result ID: 6995e73c3badfaffe6ef7479.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

Recorded evaluation configuration: {"Target Generative Model":"Stable Diffusion v1.5"}. This record does not assert independent reproduction.

### VLM-as-expert

CLIP Score: 82.7. Result ID: 6995e73c3badfaffe6ef747e.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa75681e209131cea67a98.md>)

Recorded evaluation configuration: {"Target Generative Model":"SDXL-Turbo"}. This record does not assert independent reproduction.

### BLIP

CLIP Score: 82. Result ID: 6995e73c3badfaffe6ef7478.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6bd81e209131cea30874.md>)

[Implementation](<https://github.com/salesforce/BLIP>)

Recorded evaluation configuration: {"Target Generative Model":"Stable Diffusion 3.5 Medium"}. This record does not assert independent reproduction.

### VLM-as-expert

CLIP Score: 81.7. Result ID: 6995e73c3badfaffe6ef747d.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa75681e209131cea67a98.md>)

Recorded evaluation configuration: {"Target Generative Model":"Stable Diffusion v1.5"}. This record does not assert independent reproduction.

### PromptStealer

CLIP Score: 81.6. Result ID: 6995e73c3badfaffe6ef7486.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa72f01e209131cea59689.md>)

Recorded evaluation configuration: {"Target Generative Model":"SDXL-Turbo"}. This record does not assert independent reproduction.

### BLIP

CLIP Score: 80.8. Result ID: 6995e73c3badfaffe6ef7476.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6bd81e209131cea30874.md>)

[Implementation](<https://github.com/salesforce/BLIP>)

Recorded evaluation configuration: {"Target Generative Model":"SDXL-Turbo"}. This record does not assert independent reproduction.

### PromptStealer

CLIP Score: 78.3. Result ID: 6995e73c3badfaffe6ef7485.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa72f01e209131cea59689.md>)

Recorded evaluation configuration: {"Target Generative Model":"Stable Diffusion v1.5"}. This record does not assert independent reproduction.

### BLIP

CLIP Score: 77.3. Result ID: 6995e73c3badfaffe6ef7475.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6bd81e209131cea30874.md>)

[Implementation](<https://github.com/salesforce/BLIP>)

Recorded evaluation configuration: {"Target Generative Model":"Stable Diffusion v1.5"}. This record does not assert independent reproduction.

### VGD

CLIP Score: 76.4. Result ID: 6995e73c3badfaffe6ef7489.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa7a1c1e209131cea813c0.md>)

Recorded evaluation configuration: {"Target Generative Model":"Stable Diffusion v1.5"}. This record does not assert independent reproduction.

### VGD

CLIP Score: 76.4. Result ID: 6995e73c3badfaffe6ef748b.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa7a1c1e209131cea813c0.md>)

Recorded evaluation configuration: {"Target Generative Model":"FLUX.1 dev"}. This record does not assert independent reproduction.

### VGD

CLIP Score: 76.1. Result ID: 6995e73c3badfaffe6ef748a.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa7a1c1e209131cea813c0.md>)

Recorded evaluation configuration: {"Target Generative Model":"SDXL-Turbo"}. This record does not assert independent reproduction.

### VGD

CLIP Score: 75.3. Result ID: 6995e73c3badfaffe6ef748c.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa7a1c1e209131cea813c0.md>)

Recorded evaluation configuration: {"Target Generative Model":"Stable Diffusion 3.5 Medium"}. This record does not assert independent reproduction.

### PH2P

CLIP Score: 63.8. Result ID: 6995e73c3badfaffe6ef7481.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa71901e209131cea5201e.md>)

Recorded evaluation configuration: {"Target Generative Model":"Stable Diffusion v1.5"}. This record does not assert independent reproduction.

### PH2P

CLIP Score: 63. Result ID: 6995e73c3badfaffe6ef7483.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa71901e209131cea5201e.md>)

Recorded evaluation configuration: {"Target Generative Model":"FLUX.1 dev"}. This record does not assert independent reproduction.

### PH2P

CLIP Score: 61.6. Result ID: 6995e73c3badfaffe6ef7482.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa71901e209131cea5201e.md>)

Recorded evaluation configuration: {"Target Generative Model":"SDXL-Turbo"}. This record does not assert independent reproduction.

### PH2P

CLIP Score: 61.3. Result ID: 6995e73c3badfaffe6ef7484.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa71901e209131cea5201e.md>)

Recorded evaluation configuration: {"Target Generative Model":"Stable Diffusion 3.5 Medium"}. This record does not assert independent reproduction.

Page 1 of 1. This is an index page, not the full collection.
