Multi-modal prompt injection image attacks against GPT-4Vsimonwillison.net222 pointssimonw3 years ago