Catches hidden and invisible-unicode instructions smuggled into AI coding-agent config and skill files. Zero-config CI check.
cli security mcp static-analysis developer-tools cursor sarif ai-agents claude homoglyph zero-width supply-chain-security github-copilot llm prompt-injection trojan-source rules-file-backdoor invisible-unicode
-
Updated
Jul 3, 2026 - TypeScript