[paulsutter]

Given that people will use externally sourced images in their pipeline, and the fact that some of those images could contain chatgpt instructions that we can’t see, this really is analogous to prompt injection