Catches hidden and invisible-unicode instructions smuggled into AI coding-agent config and skill files. Zero-config CI check.
-
Updated
Jul 3, 2026 - TypeScript
Catches hidden and invisible-unicode instructions smuggled into AI coding-agent config and skill files. Zero-config CI check.
Before you run AI-generated or downloaded code: a local-first Windows scanner that flags hidden Unicode payloads, auto-run scripts, and malicious AI-agent configs — with a 🔴/🟡/🟢 verdict. No install, nothing leaves your PC.
Zero-dependency scanner for smuggled prompt-injection in datasets (invisible Unicode, injection phrases, exfil URLs) — HF or local JSONL, EN+TR, CI gate. Includes an open 17k-row study of popular datasets.
Add a description, image, and links to the invisible-unicode topic page so that developers can more easily learn about it.
To associate your repository with the invisible-unicode topic, visit your repo's landing page and select "manage topics."