unicode-security

AI-detector auditing toolkit: measures how often a detector flags genuine human writing, how stable its verdict is across seeds, and whether that verdict survives meaning-preserving edits. Detector-in-the-loop measurement harness. Claude Code skill + Python CLI. MIT.

Research-only AI watermark & provenance robustness toolkit: local reverse proxy (OpenAI/Anthropic/Gemini) + CLI stripping C2PA/EXIF/XMP, zero-width & homoglyph Unicode, KGW text watermarks, DWT/Tree-Ring image stego, AudioSeal, PDF/DOCX/PPTX/XLSX metadata, and Trojan Source (CVE-2021-42574) code scanning.

Unicode Homoglyph Detector — Offensive Unicode Security Analysis

A specialized tool that generates highly obfuscated BIP custom derivation paths and passphrases. It uses layered noise (emojis, multi-script characters, and controlled entropy) to create an additional hidden (plausible deniability) protection layer in case a mnemonic seed is exposed

Detect and neutralize Unicode concealment codepoints in MCP tool metadata (covert-channel control). AGPL-3.0-or-later.

Detect, decode and remove hidden Unicode: invisible text, ASCII smuggling, homoglyphs, Trojan Source bidi and prompt injection. Python library, CLI and GitHub Action for LLM, code and AI agent security.

Zero-dependency heuristic scanner for prompt-injection indicators in untrusted text, for the boundary of LLM agent pipelines.

'İGNORE'.lower() != 'ignore'. Turkish case-folding & Unicode confusables bypass naive prompt-injection filters 94.6% of the time — measured, with dataset + a one-line NFKC fix.

Phishing-domain detection from Certificate Transparency logs, with a measured false-positive rate. Deterministic: UTS#39 homoglyph skeletons, weighted edit distance, combosquat segmentation. No ML.

Zero-dependency static analysis scanner for detecting Trojan Source bidirectional overrides, mixed-script homographs, and invisible Unicode prompt-injection payloads in source code.