@metaend.eth
PixelRAG renders documents — web pages, PDFs, images — as screenshots and retrieves over the images directly
Used pixelshot to extract data from PDF and successfully prompt injected Qwen3.6 with it - this could potentially poison your whole RAG index. Would work with any other "normal" image, but I wanted to make it obvious how dangerous this RAG method is.
#ai #secops #aisec #promptinjection