Uses prompt injection to (falsely) convince the model it can browse the web, so it’s willing to recall well known URLs. Image retrieval occurs only on the client. Model cannot see image content beyond its URL. h/t @BBacktesting for reminding me this is possible.
Prompt injection tricks model into believing web browsing, client handles image retrieval
By
–