Brief.

Tag

multimodal

1 entry.

  1. The screenshot is a prompt, not a witness

    Vision-language agents act on what they read in pixels. An attacker who controls a single image controls the instruction stream.