12Prompt injectionBelow the top 20
Steganographic injection in images and audio
CapabilityDomain knowledgeAffordanceImpact domainCap-adjacent
Statement (NASA form)
Given that vision and audio models read pixels and samples that people cannot, there is a possibility of hidden instructions riding in a logo, a slide, or a hold-music file resulting in a filter that only scans visible text missing the actual program.
Likelihood
3Probable
Consequence
3Major
Urgency
3Priority
White-on-white was the demo. The real channel is the file.
Composite 12 = 3×3 + 3
Applicable mitigations
Controls · Dual control on irreversible actions · Strict isolation of untrusted content from instructions · Hidden-text and steganographic scanning of filings · Synthetic-media quiet period before ballots · Provenance credentials on political audio and video · Mandatory, durable disclosure on authorised clones