Skill

detect-ascii-smuggling-and-hidden-unicode

Detect hidden Unicode in untrusted text before an LLM reads it or before it is stored or displayed, ASCII smuggling with Unicode tag characters, zero-width characters, bidi overrides (Trojan Source), and look-alike mixed-script words. Use on emails, web content, tool outputs, pasted prompts, filenames and code reviews. Triggers on 'prompt injection', 'hidden text', 'invisible characters', 'homoglyph', 'suspicious paste'.

Bundled with Tanod. Its trust score, security findings and other files are on the plugin page.

npx [email protected] add tanod-labs/tanod-mcp