Z. Tao, J. Peng, and H. Wang, “Prompting Adversarial Transferability via Path Flatness Attack”, AAAI, vol. 40, no. 11, pp. 9511–9519, Mar. 2026.