BeClaude

unicode-skill-injection-poc

New
1GitHub TrendingGeneralby hugobatista

Proof-of-concept demonstrating invisible Unicode prompt injection in AI agent skill files. This project shows how the Unicode Tags block (U+E0000–U+E007F), zero-width characters, and bidirectional overrides can embed hidden instructions in AI agent skill files (SKILL.md) that are invisible to human reviewers but fully processed and obeyed by LLM

First seen 5/26/2026

Install & Usage

1
Create the agents directory
mkdir -p .claude/agents
2
Save the agent file

Add the configuration to .claude/agents/unicode-skill-injection-poc.md

3
Invoke with @agent-name
@unicode-skill-injection-poc
View source on GitHub
code-reviewagent

Security Audits

LicenseUnknownSourceWarnRepositoryPass

Frequently Asked Questions

What is unicode-skill-injection-poc?

Proof-of-concept demonstrating invisible Unicode prompt injection in AI agent skill files. This project shows how the Unicode Tags block (U+E0000–U+E007F), zero-width characters, and bidirectional overrides can embed hidden instructions in AI agent skill files (SKILL.md) that are invisible to human reviewers but fully processed and obeyed by LLM

How to install unicode-skill-injection-poc?

To install unicode-skill-injection-poc: create the agents directory (mkdir -p .claude/agents), then add the config to .claude/agents/unicode-skill-injection-poc.md. Finally, @unicode-skill-injection-poc in Claude Code.

What is unicode-skill-injection-poc best for?

unicode-skill-injection-poc is a agent categorized under General. It is designed for: code-review, agent. Created by hugobatista.