unicode-check
Unicode smuggling check for strings (prompts, tool args, URLs) — Checks up to 100 strings in one call against the 19 deterministic rules of unicode-safety-check: bidi controls (Trojan Source), invisible and zero-width characters, tag-character and variation-selector payloads, homoglyph and mixed-script hosts or names. Built for an agent's hot path: run it on a prompt, a tool argument, a URL or a model output before acting on it. Returns BLOCK / REVIEW / NO_FIND
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"strings": "<strings>"
},
"name": "unicode-check"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| kind | No | text (default): prose, only critical findings block. identifier or url: high findings such as mixed-script names also block. | |
| strings | Yes | Up to 200000 characters in total. |