TransparAI: AI Image Detection & EU AI Act Labeling
| 开发者 | contexlabs |
|---|---|
| 更新时间 | 2026年9月9日 05:57 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
- C2PA manifests (Content Credentials) as embedded by OpenAI (ChatGPT, DALL-E and GPT-Image), Adobe Firefly, Google Gemini (Nano Banana output included) and Bing Image Creator
- The IPTC digital source type in XMP metadata, the marking Midjourney and a growing number of tools write
- Generation parameters in PNG text chunks from Stable Diffusion (AUTOMATIC1111), ComfyUI, NovelAI and InvokeAI
- EXIF and XMP generator signatures for Flux (Black Forest Labs), Leonardo.Ai, Ideogram, Recraft, Seedream and Photoshop Generative Fill
- JPEG comment markers, C2PA declarations in MP4 video and AI declarations in MP3 audio (ID3)
wp transparai scan, wp transparai status --format=csv for the same export on the command line, wp transparai verify-meta --repair to check and fix the in-file metadata. Other plugins can label media through do_action( 'transparai_mark_ai', $attachment_id, 'My Generator' ), the detection rules are extensible via filters, translation setups are covered by a bundled WPML configuration, and uninstalling cleans up across every site of a multisite network when you ask it to.
The plugin runs entirely on your server. No accounts, no telemetry, and no request to anyone else: the only HTTP request it can make is the optional delivery check, which asks your own site for one image to see whether your CDN strips the declaration on the way out. Please also read the Disclaimer section below.
The interface is available in English, German, French, Spanish, Italian and Dutch.
Contact: TransparAI@cms-admins.de
安装:
- Install the plugin from the WordPress plugin directory (Plugins, Add New, search for "TransparAI") or upload the ZIP, then activate it.
- Open Media, TransparAI. New uploads are checked automatically from now on.
- Click Scan new/unscanned media to go through your existing library in small batches, pausable at any time.
- Clear declarations are labeled right away; strong signals land in the review queue. Follow the Open review queue link and confirm or dismiss each item, single or in bulk. A camera photo with Content Credentials shows up here on purpose; dismiss it once and it stays dismissed. Media you have already decided on yourself is reported as skipped in the scan summary and is never overruled.
- Adjust the badge under Visible badge, and if your theme prints images without an attachment ID (ACF URL fields, sliders) or uses CSS backgrounds, enable the extra option under Extras.
- Single image sitting awkwardly? Open its attachment details and pick a Badge position there: another corner, a caption line below the image, or no visible badge for that one image.
exiftool -XMP-iptcExt:DigitalSourceType image.jpg), and the hourly sweep restores metadata that optimizers strip.屏幕截图:
常见问题:
Can the plugin detect every AI image?
No, and no plugin can. Detection relies on metadata that generators embed. Images whose metadata was stripped (social media re-uploads, screenshots, clipboard pastes) carry no signals. Invisible pixel watermarks such as Google SynthID can only be verified by the vendor's own service; TransparAI does not pretend otherwise. Detected metadata is an indication, not cryptographic proof. That is exactly why the review queue exists.
Which AI image generators are recognized?
Anything that leaves a standard marking in the file. In practice that covers ChatGPT and DALL-E, GPT-Image, Google Gemini including Nano Banana output, Adobe Firefly and Photoshop Generative Fill, Bing Image Creator, Midjourney, Stable Diffusion (AUTOMATIC1111, ComfyUI, InvokeAI, SwarmUI, Fooocus), NovelAI, Flux by Black Forest Labs, Leonardo.Ai, Ideogram, Recraft and Seedream, plus every tool that writes a C2PA manifest or the IPTC digital source type, which is the direction the whole industry is moving in. New signatures can be added with a filter, no code fork needed. TransparAI is an independent plugin and is not affiliated with any of these vendors.
Does the plugin make my site compliant with the EU AI Act?
It gives you the technical building blocks Article 50 asks for: a visible disclosure and a machine-readable marking. Whether and how the EU AI Act or any other law applies to your site, and whether your specific setup satisfies it, is a legal question only you (or your lawyer) can answer. See the Disclaimer section.
Is this legal advice?
No. TransparAI is a technical tool, not legal advice, and using it creates no guarantee of compliance with any regulation. See the Disclaimer section.
Does the plugin change my image files?
Only when a file is labeled and the metadata option is enabled. The plugin then writes a small XMP block into the JPEG, PNG, WebP or AVIF file and its size variants. The image pixels are untouched. Files are replaced atomically and validated first. Unlabeling removes exactly the metadata this plugin wrote; foreign metadata is never touched.
Where can I see what was written into a file?
Open the attachment details and click "Show file metadata". It lists every file of that attachment with its state (declaration present, missing, or a format that cannot carry one), the digital source type currently declared, the detection evidence in full, the recorded history and the raw XMP packet of the main file. Nothing is written while you look; it is a read of the files as they are on disk right now.
Does the marking survive my CDN?
Not always, and that is worth checking. Image optimizers at the edge, Cloudflare Polish and Jetpack Photon among them, re-encode images while delivering them and drop every metadata block in the process. The file on your server stays perfect while visitors and search engines receive a bare image, and nothing in WordPress shows it. Enable the delivery check in the settings, then press "Check delivery" on a labeled image: the plugin fetches that image from your own public URL and tells you whether the declaration arrived. If it did not, the fix is in your CDN configuration (keep metadata, or exclude labeled images from re-encoding), not in this plugin.
Can I also label AI-written text?
Yes. Every post and page has a "This content is AI-generated" checkbox in the editor sidebar; marked content gets a short configurable note ahead of it. There is also an optional site-wide note at the end of pages that contain labeled media.
Why was a real camera photo put into the review queue?
Modern cameras embed C2PA Content Credentials into real photos. A C2PA manifest alone therefore never auto-labels. It lands in the review queue unless the manifest declares an AI source. Dismiss it with one click; dismissed files are not queued again.
Which page builders and editors are supported?
The visible badge covers the block editor (every image-bearing block incl. cover, media-text, galleries, inline images in text, video and audio), the classic editor, template images, text widgets, Elementor free and Pro (image, galleries, carousels, slides, image box, hotspot, flip box, call to action, posts, Theme Builder) and WPBakery Page Builder (single images, galleries, carousels, row and column backgrounds, parallax, grids). Inside the builders' own editing screens badges are deliberately not injected. For images a theme prints without an attachment ID (ACF URL or array fields) enable the option under Extras: a small script matches those images and CSS backgrounds against your labeled files. The machine-readable XMP labeling is independent of any builder and always works.
My theme puts overlays on images; does the badge disappear under them?
Usually not, and never silently. Badges sit above typical theme layers (hover effects, zoom icons, sale badges), and a small script additionally checks the real paint order: a badge that is still covered is raised, moved to a free corner or, as the last resort, shown as a caption line below the image (this guard can be turned off under Visible badge, Extras). For manual control, give any container one of the utility classes trai-badge-top-left, trai-badge-top-right, trai-badge-bottom-left, trai-badge-bottom-right, trai-badge-below or trai-badge-hidden, or pick a position for a single image in its attachment details ("Badge position"). Both ways switch the guard off for those badges, and trai-badge-manual does the same without changing the position, for the rare case where the guard misjudges your layout. Hiding the visible badge of one image never touches the machine-readable file metadata or the structured data in the page; that part of the disclosure stays intact.
Does the plugin phone home?
No. There are no external requests of any kind. All detection happens by reading file bytes locally on your server.
What happens when I uninstall the plugin?
By default your labels stay in the database (reinstalling restores them) and metadata already written stays in the files. If you prefer a full cleanup, enable "Delete all plugin data" in the settings before uninstalling. Unlabel files first if you also want the in-file metadata removed.
Can I label media programmatically?
Yes. The meta key _transparai_ai is registered for the REST API, WP-CLI commands cover bulk work, and other plugins can call do_action( 'transparai_mark_ai', $attachment_id, 'Generator name' ).
Where do I get help?
Post in the support forum here on wordpress.org, or write to TransparAI@cms-admins.de. The plugin is built and maintained by Patrick Schlesinger (cms-admins.de).
更新日志:
- Fixed: scanning the existing library stopped after the first batch on some sites. The progress bar simply stayed where it was and reported no error, which looked like a scan still running. Sites whose theme or another plugin loads the media library on the plugin page were affected. The scan runs to the end again.
- Fixed: PNG files were only searched for metadata inside their first 512 KB. PNG allows metadata to sit after the image data, so large generated images carried their declaration outside that window and were reported as clean. The whole file is read now, and the memory it takes no longer grows with the file size.
- Fixed: images from Bing Image Creator, Microsoft Designer and Copilot were only queued for review instead of being labeled, because Microsoft signs them with a claim generator that no rule matched. In return, an editor whose name merely contains "Designer", Affinity Designer for one, no longer counts as proof of AI origin.
- The file inspection now says whether the attachment is labeled at all, so a file that is not supposed to carry a declaration is no longer listed as if something were missing from it.
- Fixed: the hourly integrity sweep was only scheduled by the activation hook, which fires once for a network-wide activation. Every site created in the network afterwards silently kept no schedule at all, so stripped AI declarations were never repaired there. The schedule is now set up on load and covers new sites, restored backups and cron entries lost in a migration.
- Per-file history: every label, review decision, repair and failed write is recorded with its time and the editor who made it (the last ten events per file), so a disclosure decision can still be explained months later.
- Audit export as CSV directly from the plugin page, with the detection source, confidence and last change of every labeled and pending file. Same rows as
wp transparai status, which now carries the last-change columns too. - File inspection in the attachment details: "Show file metadata" lists every size with its state (declaration present, missing, or a format that cannot carry one), the declared digital source type, the detection evidence in full and the raw XMP packet.
- Optional delivery check: an optimizing CDN or image proxy can re-encode images while serving them and drop the declaration, which is invisible from the admin because the file on disk stays correct. The check fetches one image over its own public URL and compares the delivered bytes with the file. It is off by default, runs only on click or through
wp transparai verify-delivery, and never requests media served from another host. - Translations shipped for German, French, Spanish, Italian and Dutch.
- Automatic AI detection: C2PA Content Credentials (JPEG, PNG, WebP, MP4 and MOV, .c2pa sidecars), the IPTC digital source type in XMP and IPTC-IIM, PNG generator chunks, EXIF and XMP generator signatures, JPEG comment markers, ID3 declarations in MP3.
- Camera rule: a C2PA manifest alone never auto-labels, since Leica, Sony and Nikon put Content Credentials into real photos.
- Confidence levels with a review queue, single and bulk confirm or dismiss, stored evidence per file, plus a batched and pausable scan of the whole library.
- Visible badge: overlay or caption line, four positions, three sizes, dark, light, outline and icon-only, optional generator name, optional badge start date, per-image override and CSS utility classes for themes. Rendered server-side, so it survives page caching.
- Overlay guard: badges that a theme layer actually covers are raised, moved or turned into a caption line, based on the real paint order rather than z-index guessing.
- Machine-readable labeling: the IPTC digital source type written as XMP into JPEG, PNG, WebP and AVIF including every size variant, merging instead of replacing existing metadata, atomic and validated writes, optional IPTC-IIM mirror.
- Schema.org JSON-LD (ImageObject, VideoObject, AudioObject with digitalSourceType) for the labeled media on each page, an optional site-wide disclosure note and a per-post label for AI-written text.
- Auto-repair: file fingerprints and an hourly sweep restore AI declarations that image optimizers or thumbnail regeneration stripped.
- Editor and builder coverage: block editor, classic editor, template images, text widgets, WooCommerce incl. gallery lightbox, Elementor free and Pro incl. Theme Builder, WPBakery Page Builder.
- Page caches are purged when a label changes (WP Rocket, LiteSpeed, W3 Total Cache, WP Super Cache, WP Fastest Cache, SiteGround Optimizer, Cache Enabler, Breeze, Nginx Helper, Hummingbird).
- WP-CLI: scan, flag, unflag, status with CSV and JSON export, write-meta, verify-meta with repair.
- Integrations for on-site generators (AI Engine, AI Power, Elementor AI, WordPress AI), a public transparai_mark_ai action, detection filters, WPML and Polylang configuration.
- No external requests of any kind.