What AI Safety needs is better tooling and engineering. For instance, building stronger red-teaming tools. Great to see this open-source effort to red-team image models. It seems to learn better ways to write attack prompts. It is open source and runs on an open Qwen model with Gemini Flash as the judge, so defenders can run the same tests on their own image models.