It is an adversarial attack. In simple words, given an AI named "attacker" and an AI named "victim", the attacker artificial intelligence is trained to change an image as little as possible while also changing the way that the "victim" classifies the image as much as possible.
spam fails_task lang_mismatch pii not_appropriate hate_speech sexual_content quality toxicity humor helpfulness creativity violence