Skip to content
AI News HubLIVE
Original source3 min read

StyleShield: Exposing the Fragility of AIGC Detectors through Continuous Controllable Style Transfer

Summary

StyleShield is a novel flow matching framework that effectively evades AI-generated content detectors through conditional text style transfer in continuous token embedding space. It achieves a 94.6% evasion rate against a trained detector and over 99% against three unseen detectors on a multi-domain Chinese benchmark, while maintaining 0.928 semantic similarity. The work also introduces RateAudit, a scheduling algorithm that exposes the arbitrariness of detection scores.

SourcearXiv Machine LearningAuthor: Guantian Zheng
StyleShield: Exposing the Fragility of AIGC Detectors through Continuous Controllable Style Transfer
Report an error

The correction channel is not available yet. You can copy the article reference below for later.

Correction instructions
Read article

[2605.00924] StyleShield: Exposing the Fragility of AIGC Detectors through Continuous Controllable Style Transfer

Skip to main content

Learn about arXiv becoming an independent nonprofit.

We gratefully acknowledge support from the Simons Foundation, member institutions, and all contributors. Donate

> cs > arXiv:2605.00924

Help | Advanced Search

All fields Title Author Abstract Comments Journal reference ACM classification MSC classification Report number arXiv identifier DOI ORCID arXiv author ID Help pages Full text

Search

GO

quick links

Login

Help Pages

About

-->

Computer Science > Machine Learning

arXiv:2605.00924 (cs)

[Submitted on 30 Apr 2026]

Title:StyleShield: Exposing the Fragility of AIGC Detectors through Continuous Controllable Style Transfer

Authors:Guantian Zheng

View a PDF of the paper titled StyleShield: Exposing the Fragility of AIGC Detectors through Continuous Controllable Style Transfer, by Guantian Zheng

View PDF HTML (experimental)

Abstract:AI-generated content (AIGC) detectors are increasingly deployed in high-stakes settings such as academic integrity screening, yet their reliability rests on a fundamental paradox: as language models are trained on human-written corpora, the statistical boundary between AI and human writing will inevitably dissolve as models improve. Commercial incentives have further distorted this landscape -- detection services and "de-AIification" tools often operate within the same supply chain, replacing evaluation of content quality with judgment of content origin. We present StyleShield, the first flow matching framework for conditional text style transfer, operating directly in continuous token embedding space via a DiT backbone with zero-initialized cross-attention adapters conditioned on frozen Qwen-7B representations. At inference, we adapt the SDEdit paradigm from image synthesis to text embeddings, with a single parameter gamma providing smooth continuous control over the evasion-preservation trade-off. On a multi-domain Chinese benchmark, StyleShield achieves 94.6% evasion against the training detector and >=99% against three unseen detectors, maintaining 0.928 semantic similarity. We further introduce RateAudit, a document-level scheduling algorithm that demonstrates detection-rate verdicts can be set to arbitrary values, directly questioning the reliability of score-based evaluation.

Comments: 12 pages, 5 figures. Code and model weights will be released upon acceptance

Subjects:

Machine Learning (cs.LG); Artificial Intelligence (cs.AI)

Cite as: arXiv:2605.00924 [cs.LG]

(or arXiv:2605.00924v1 [cs.LG] for this version)

https://doi.org/10.48550/arXiv.2605.00924

Focus to learn more

arXiv-issued DOI via DataCite (pending registration)

Submission history

From: Guantian Zheng [view email] [v1] Thu, 30 Apr 2026 18:24:31 UTC (214 KB)

Full-text links:

Access Paper:

View a PDF of the paper titled StyleShield: Exposing the Fragility of AIGC Detectors through Continuous Controllable Style Transfer, by Guantian Zheng

View PDF

HTML (experimental)

TeX Source

view license

Current browse context:

cs.LG

new | recent | 2026-05

Change to browse by:

cs cs.AI

References & Citations

NASA ADS

Google Scholar

Semantic Scholar

export BibTeX citation Loading...

BibTeX formatted citation

×

loading...

Data provided by:

Bookmark

Bibliographic Tools

Bibliographic and Citation Tools

Bibliographic Explorer Toggle

Bibliographic Explorer (What is the Explorer?)

Connected Papers Toggle

Connected Papers (What is Connected Papers?)

Litmaps Toggle

Litmaps (What is Litmaps?)

scite.ai Toggle

scite Smart Citations (What are Smart Citations?)

Code, Data, Media

Code, Data and Media Associated with this Article

alphaXiv Toggle

alphaXiv (What is alphaXiv?)

Links to Code Toggle

CatalyzeX Code Finder for Papers (What is CatalyzeX?)

DagsHub Toggle

DagsHub (What is DagsHub?)

GotitPub Toggle

Gotit.pub (What is GotitPub?)

Huggingface Toggle

Hugging Face (What is Huggingface?)

ScienceCast Toggle

ScienceCast (What is ScienceCast?)

Demos

Demos

Replicate Toggle

Replicate (What is Replicate?)

Spaces Toggle

Hugging Face Spaces (What is Spaces?)

Spaces Toggle

TXYZ.AI (What is TXYZ.AI?)

Related Papers

Recommenders and Search Tools

Link to Influence Flower

Influence Flower (What are Influence Flowers?)

Core recommender toggle

CORE Recommender (What is CORE?)

IArxiv recommender toggle

IArxiv Recommender (What is IArxiv?)

Author

Venue

Institution

Topic

About arXivLabs

arXivLabs: experimental projects with community collaborators

arXivLabs is a framework that allows collaborators to develop and share new arXiv features directly on our website.

Both individuals and organizations that work with arXivLabs have embraced and accepted our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners that adhere to them.

Have an idea for a project that will add value for arXiv's community? Learn more about arXivLabs.

Which authors of this paper are endorsers? | Disable MathJax (What is MathJax?)

About

Help

contact arXivClick here to contact arXiv Contact

subscribe to arXiv mailingsClick here to subscribe Subscribe

Copyright

Privacy Policy

Web Accessibility Assistance

arXiv Operational Status

Key points and analysis

Article intelligence

EngineersAdvanced

Key points

  • StyleShield is the first flow matching framework for conditional text style transfer, using a DiT backbone and frozen Qwen-7B representations.
  • It achieves 94.6% evasion against a trained detector and >99% against three unseen detectors on a multi-domain Chinese benchmark.
  • The RateAudit algorithm demonstrates that detection verdicts can be arbitrarily set, questioning the reliability of score-based evaluation.
  • The study highlights the fundamental paradox of AI detectors and commercial incentives undermining their fairness.

Highlights and analysis are generated automatically and may contain errors. Check the original source.