[Kiro]

Yes, that's the classic GPT4-V attack:

https://simonwillison.net/2023/Oct/14/multi-modal-prompt-inj...