# Prompt Stealing on Lexica 50 random prompts

Source: [Prompt Stealing on Lexica 50 random prompts](<https://www.sota2.com/research/sota/prompt-stealing-on-lexica-50-random-prompts>)

Collection index: [llms.txt](<https://www.sota2.com/research/llms.txt>)

Data updated: 2026-02-26T05:38:32.654Z

Evaluation of model performance on the Prompt Stealing task using 50 random prompts derived from the Lexica dataset, assessed via CLIP, LPIPS, and SBERT similarity scores.

A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage.

| Scope | Recorded value |
| --- | --- |
| Task | Prompt Stealing |
| Dataset (including any stated split) | Lexica 50 random prompts |
| Metric | CLIP Similarity |
| Unit | PERCENT |
| Direction | Higher is better |
| Results loaded | 28 of 28 |
| Coverage | All results currently returned for this benchmark |

Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol.

## Metrics

- [CLIP Similarity](<https://www.sota2.com/research/sota/prompt-stealing-on-lexica-50-random-prompts.md?metric=CLIP%20Similarity>): Higher is better; unit: PERCENT.

- [LPIPS Similarity](<https://www.sota2.com/research/sota/prompt-stealing-on-lexica-50-random-prompts.md?metric=LPIPS%20Similarity>): Higher is better; unit: PERCENT.

- [SBERT Similarity](<https://www.sota2.com/research/sota/prompt-stealing-on-lexica-50-random-prompts.md?metric=SBERT%20Similarity>): Higher is better; unit: PERCENT.

## Recorded results

| Method | CLIP Similarity | Result date | Report paper |
| --- | --- | --- | --- |
| PROMPTMINER | 92.1 | Not recorded | 692d2108d6b0dd3342931618 |
| PROMPTMINER | 92.1 | Not recorded | 692d2108d6b0dd3342931618 |
| PROMPTMINER | 91.1 | Not recorded | 692d2108d6b0dd3342931618 |
| PROMPTMINER | 87.5 | Not recorded | 692d2108d6b0dd3342931618 |
| VLM-as-expert | 86.6 | Not recorded | 692d2108d6b0dd3342931618 |
| CLIP-IG | 86 | Not recorded | 692d2108d6b0dd3342931618 |
| CLIP-IG | 85.9 | Not recorded | 692d2108d6b0dd3342931618 |
| VLM-as-expert | 85.7 | Not recorded | 692d2108d6b0dd3342931618 |
| CLIP-IG | 85.6 | Not recorded | 692d2108d6b0dd3342931618 |
| CLIP-IG | 84 | Not recorded | 692d2108d6b0dd3342931618 |
| VLM-as-expert | 81.1 | Not recorded | 692d2108d6b0dd3342931618 |
| PromptStealer | 80.4 | Not recorded | 692d2108d6b0dd3342931618 |
| VLM-as-expert | 79.4 | Not recorded | 692d2108d6b0dd3342931618 |
| PromptStealer | 78.8 | Not recorded | 692d2108d6b0dd3342931618 |
| PromptStealer | 78.7 | Not recorded | 692d2108d6b0dd3342931618 |
| VGD | 76.6 | Not recorded | 692d2108d6b0dd3342931618 |
| PromptStealer | 76.2 | Not recorded | 692d2108d6b0dd3342931618 |
| VGD | 76.2 | Not recorded | 692d2108d6b0dd3342931618 |
| BLIP | 76 | Not recorded | 692d2108d6b0dd3342931618 |
| VGD | 76 | Not recorded | 692d2108d6b0dd3342931618 |
| VGD | 75.3 | Not recorded | 692d2108d6b0dd3342931618 |
| BLIP | 74.9 | Not recorded | 692d2108d6b0dd3342931618 |
| BLIP | 74.6 | Not recorded | 692d2108d6b0dd3342931618 |
| BLIP | 69.9 | Not recorded | 692d2108d6b0dd3342931618 |
| PH2P | 66.2 | Not recorded | 692d2108d6b0dd3342931618 |
| PH2P | 65.7 | Not recorded | 692d2108d6b0dd3342931618 |
| PH2P | 64 | Not recorded | 692d2108d6b0dd3342931618 |
| PH2P | 61.3 | Not recorded | 692d2108d6b0dd3342931618 |

### PROMPTMINER

CLIP Similarity: 92.1. Result ID: 6995e73c3badfaffe6ef74ab.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

Recorded evaluation configuration: {"Target Generative Model":"FLUX.1 dev"}. This record does not assert independent reproduction.

### PROMPTMINER

CLIP Similarity: 92.1. Result ID: 6995e73c3badfaffe6ef74ac.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

Recorded evaluation configuration: {"Target Generative Model":"Stable Diffusion 3.5 Medium"}. This record does not assert independent reproduction.

### PROMPTMINER

CLIP Similarity: 91.1. Result ID: 6995e73c3badfaffe6ef74aa.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

Recorded evaluation configuration: {"Target Generative Model":"SDXL-Turbo"}. This record does not assert independent reproduction.

### PROMPTMINER

CLIP Similarity: 87.5. Result ID: 6995e73c3badfaffe6ef74a9.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

Recorded evaluation configuration: {"Target Generative Model":"Stable Diffusion v1.5"}. This record does not assert independent reproduction.

### VLM-as-expert

CLIP Similarity: 86.6. Result ID: 6995e73c3badfaffe6ef749b.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa75681e209131cea67a98.md>)

Recorded evaluation configuration: {"Target Generative Model":"FLUX.1 dev"}. This record does not assert independent reproduction.

### CLIP-IG

CLIP Similarity: 86. Result ID: 6995e73c3badfaffe6ef7497.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

Recorded evaluation configuration: {"Target Generative Model":"FLUX.1 dev"}. This record does not assert independent reproduction.

### CLIP-IG

CLIP Similarity: 85.9. Result ID: 6995e73c3badfaffe6ef7498.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

Recorded evaluation configuration: {"Target Generative Model":"Stable Diffusion 3.5 Medium"}. This record does not assert independent reproduction.

### VLM-as-expert

CLIP Similarity: 85.7. Result ID: 6995e73c3badfaffe6ef749c.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa75681e209131cea67a98.md>)

Recorded evaluation configuration: {"Target Generative Model":"Stable Diffusion 3.5 Medium"}. This record does not assert independent reproduction.

### CLIP-IG

CLIP Similarity: 85.6. Result ID: 6995e73c3badfaffe6ef7496.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

Recorded evaluation configuration: {"Target Generative Model":"SDXL-Turbo"}. This record does not assert independent reproduction.

### CLIP-IG

CLIP Similarity: 84. Result ID: 6995e73c3badfaffe6ef7495.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

Recorded evaluation configuration: {"Target Generative Model":"Stable Diffusion v1.5"}. This record does not assert independent reproduction.

### VLM-as-expert

CLIP Similarity: 81.1. Result ID: 6995e73c3badfaffe6ef749a.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa75681e209131cea67a98.md>)

Recorded evaluation configuration: {"Target Generative Model":"SDXL-Turbo"}. This record does not assert independent reproduction.

### PromptStealer

CLIP Similarity: 80.4. Result ID: 6995e73c3badfaffe6ef74a4.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa72f01e209131cea59689.md>)

Recorded evaluation configuration: {"Target Generative Model":"Stable Diffusion 3.5 Medium"}. This record does not assert independent reproduction.

### VLM-as-expert

CLIP Similarity: 79.4. Result ID: 6995e73c3badfaffe6ef7499.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa75681e209131cea67a98.md>)

Recorded evaluation configuration: {"Target Generative Model":"Stable Diffusion v1.5"}. This record does not assert independent reproduction.

### PromptStealer

CLIP Similarity: 78.8. Result ID: 6995e73c3badfaffe6ef74a3.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa72f01e209131cea59689.md>)

Recorded evaluation configuration: {"Target Generative Model":"FLUX.1 dev"}. This record does not assert independent reproduction.

### PromptStealer

CLIP Similarity: 78.7. Result ID: 6995e73c3badfaffe6ef74a2.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa72f01e209131cea59689.md>)

Recorded evaluation configuration: {"Target Generative Model":"SDXL-Turbo"}. This record does not assert independent reproduction.

### VGD

CLIP Similarity: 76.6. Result ID: 6995e73c3badfaffe6ef74a6.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa7a1c1e209131cea813c0.md>)

Recorded evaluation configuration: {"Target Generative Model":"SDXL-Turbo"}. This record does not assert independent reproduction.

### PromptStealer

CLIP Similarity: 76.2. Result ID: 6995e73c3badfaffe6ef74a1.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa72f01e209131cea59689.md>)

Recorded evaluation configuration: {"Target Generative Model":"Stable Diffusion v1.5"}. This record does not assert independent reproduction.

### VGD

CLIP Similarity: 76.2. Result ID: 6995e73c3badfaffe6ef74a8.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa7a1c1e209131cea813c0.md>)

Recorded evaluation configuration: {"Target Generative Model":"Stable Diffusion 3.5 Medium"}. This record does not assert independent reproduction.

### BLIP

CLIP Similarity: 76. Result ID: 6995e73c3badfaffe6ef7493.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6bd81e209131cea30874.md>)

[Implementation](<https://github.com/salesforce/BLIP>)

Recorded evaluation configuration: {"Target Generative Model":"FLUX.1 dev"}. This record does not assert independent reproduction.

### VGD

CLIP Similarity: 76. Result ID: 6995e73c3badfaffe6ef74a7.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa7a1c1e209131cea813c0.md>)

Recorded evaluation configuration: {"Target Generative Model":"FLUX.1 dev"}. This record does not assert independent reproduction.

### VGD

CLIP Similarity: 75.3. Result ID: 6995e73c3badfaffe6ef74a5.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa7a1c1e209131cea813c0.md>)

Recorded evaluation configuration: {"Target Generative Model":"Stable Diffusion v1.5"}. This record does not assert independent reproduction.

### BLIP

CLIP Similarity: 74.9. Result ID: 6995e73c3badfaffe6ef7492.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6bd81e209131cea30874.md>)

[Implementation](<https://github.com/salesforce/BLIP>)

Recorded evaluation configuration: {"Target Generative Model":"SDXL-Turbo"}. This record does not assert independent reproduction.

### BLIP

CLIP Similarity: 74.6. Result ID: 6995e73c3badfaffe6ef7494.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6bd81e209131cea30874.md>)

[Implementation](<https://github.com/salesforce/BLIP>)

Recorded evaluation configuration: {"Target Generative Model":"Stable Diffusion 3.5 Medium"}. This record does not assert independent reproduction.

### BLIP

CLIP Similarity: 69.9. Result ID: 6995e73c3badfaffe6ef7491.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6bd81e209131cea30874.md>)

[Implementation](<https://github.com/salesforce/BLIP>)

Recorded evaluation configuration: {"Target Generative Model":"Stable Diffusion v1.5"}. This record does not assert independent reproduction.

### PH2P

CLIP Similarity: 66.2. Result ID: 6995e73c3badfaffe6ef749e.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa71901e209131cea5201e.md>)

Recorded evaluation configuration: {"Target Generative Model":"SDXL-Turbo"}. This record does not assert independent reproduction.

### PH2P

CLIP Similarity: 65.7. Result ID: 6995e73c3badfaffe6ef749f.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa71901e209131cea5201e.md>)

Recorded evaluation configuration: {"Target Generative Model":"FLUX.1 dev"}. This record does not assert independent reproduction.

### PH2P

CLIP Similarity: 64. Result ID: 6995e73c3badfaffe6ef749d.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa71901e209131cea5201e.md>)

Recorded evaluation configuration: {"Target Generative Model":"Stable Diffusion v1.5"}. This record does not assert independent reproduction.

### PH2P

CLIP Similarity: 61.3. Result ID: 6995e73c3badfaffe6ef74a0.

[Reporting paper](<https://www.sota2.com/research/paper/692d2108d6b0dd3342931618.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa71901e209131cea5201e.md>)

Recorded evaluation configuration: {"Target Generative Model":"Stable Diffusion 3.5 Medium"}. This record does not assert independent reproduction.

Page 1 of 1. This is an index page, not the full collection.
