Why it matters
Text2VLM is a reproducible pipeline that extracts harmful concepts from text-only safety datasets and renders them as typographic images for multimodal evaluation. Human validation supports the transformation pipeline, and tests of open-source visual language models find greater prompt-injection susceptibility when the same concepts arrive through images instead of plain text.
My takeaway: Transform the existing text attack suite into screenshots, documents, typographic images, and mixed text-image cases, then measure results separately by modality and layout. Preserve the source prompt and transformation metadata, validate generated cases with humans, and test OCR, perception, policy, and downstream tool behavior as distinct failure points.