The image scaling attack described by Morozova and Hussain is a form of indirect prompt injection, and it has a better chance ...