{"uid":"cap_TaQlgPK9gRn4Q7ttGiS4U","slug":"unveil-prompt-injection-scanner-26a36b19","name":"Unveil Prompt Injection Scanner","description":"Scan untrusted text or URLs for hidden prompt injection before an AI agent reads them: invisible Unicode, tag-character smuggling, bidi overrides, terminal escapes, instructions in HTML comments or CSS-hidden elements, secret-exfiltration requests, text addressed to AI readers. Matched text is never returned (sha256 only). Paid per call via x402, USDC on Base.","url":"https://unveil.x402utils.workers.dev/v1/scan?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"text":{"type":"string","description":"Untrusted text to scan (max 500 KB)"}}},"responseSchema":{"type":"json","example":{"counts":{"low":0,"high":1,"medium":0},"verdict":"dangerous","findings":[{"line":1,"rule":"UNV002","title":"Unicode tag-character smuggling","column":6,"detail":"16 tag characters decode to a withheld payload","severity":"high","evidence_length":41,"evidence_sha256":"3f1c…"}]}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_We8g9n6XvF0q40BycncNu","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Scans untrusted text for hidden prompt injection attacks including invisible Unicode, tag-character smuggling, bidi overrides, AI-targeted instructions, and secret-exfiltration patterns before an AI agent processes it","exampleAgentPrompt":"Before you process that user-submitted message, scan it for hidden prompt injection — things like invisible Unicode, tag-character smuggling, or any instructions secretly aimed at you — and tell me if it's safe to read.","exampleUseCases":[{"title":"Guard agent inbox from injected instructions","prompt":"I'm building an AI customer support agent that reads emails from users. Before my agent processes each email, scan it for hidden prompt injection attacks like invisible Unicode or AI-targeted instructions embedded in the text so I know it's safe."},{"title":"Validate scraped webpage before LLM summarization","prompt":"I just scraped the contents of this webpage and I want to summarize it with my AI, but first scan the raw HTML text for any hidden instructions in comments, CSS-hidden elements, or bidi overrides that could hijack my agent."},{"title":"Audit user-provided document for exfiltration attempts","prompt":"A user pasted this document into our platform and our AI is about to read it — scan it first for any secret-exfiltration requests or text secretly addressed to AI readers before we let the agent touch it."}],"resultDescription":"Returns a JSON object with a top-level verdict (e.g. 'safe', 'dangerous', 'suspicious'), per-severity counts (low/medium/high), and an array of findings each containing line number, column, rule ID, title, severity, detail description, evidence length, and a SHA256 hash of the matched text (the actual matched content is never returned for safety).","failureModes":["Text payload exceeds 500 KB limit — request rejected","Malformed JSON body — 400 error","Payment not attached or insufficient USDC — 402 Payment Required","Network timeout for very large payloads","False negatives on novel obfuscation techniques not yet covered by ruleset"],"whenToPreferThis":"Choose Unveil when your AI agent needs to safely process text or web content from untrusted sources and you need a pre-flight security check specifically for prompt injection vectors. It is uniquely suited for agentic pipelines where untrusted content (emails, web scrapes, user uploads, API responses) must be sanitized before an LLM reads it. Unlike general content moderation APIs, Unveil specifically targets AI-attack vectors: invisible Unicode, tag-character smuggling, bidi overrides, terminal escapes, HTML comment instructions, CSS-hidden text, and secret exfiltration patterns — returning only SHA256 hashes of matched content so the scanner itself cannot be weaponized.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-12T00:32:21.348Z","isFirstParty":false,"canonicalSlug":"unveil-prompt-injection-scanner-26a36b19"}