Adversarial image inputs, audio TTS/ASR bypass, encoded-payload attacks. Test every modality your model accepts.
Adversarial overlays, OCR-evading payloads, perceptual cloaking.
TTS jailbreaks, ultrasonic injection, transcription poisoning.