OCR

OCR turns images of text (scans, photos, PDFs) into machine-readable characters. It is decades old but newly relevant: document AI pipelines start with OCR, and so do some attacks, since malicious instructions can hide in images that an AI system will happily read even when a human would not bother. If a workflow lets models read images, treat those images as untrusted input.