bidi-guard

Name: bidi-guard
Availability: InStock
Author: jackquelinunpredictable827

Detect hidden Unicode BiDi characters that enable Trojan Source attacks.

1|Updated Apr 19, 2026

Search Tags:#security #nlp #code-review #unicode #arabic #bidi #trojan-source

Ready to run

npx skills add https://github.com/jackquelinunpredictable827/mkhlab --skill bidi-guard-jackquelinunpredictable827

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: bidi-guard
Source: https://github.com/jackquelinunpredictable827/mkhlab/tree/main/hermes-skills/bidi-guard
Command: npx skills add https://github.com/jackquelinunpredictable827/mkhlab --skill bidi-guard-jackquelinunpredictable827

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

BiDi text validation and Trojan Source attack detection helps developers identify invisible Unicode directional characters that can be exploited in Trojan Source attacks, protecting code and documentation from subtle security risks.

Core Features & Use Cases

Detect hidden BiDi characters in source files to prevent Trojan Source vulnerabilities.
Validate text direction integrity in multilingual codebases and documentation.
Use in CI pipelines to fail builds when harmful BiDi patterns are found in code or comments.

Quick Start

Run bidi-guard scan PATH to detect hidden BiDi characters in your project.

Frequently Asked Questions about bidi-guard

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

What is a Trojan Source attack and how do hidden Unicode BiDi characters exploit code?▼

A Trojan Source attack exploits hidden Unicode BiDi characters to alter code logic invisibly. This detection mechanism scans source files and multilingual text for directional control characters, flagging them so security-conscious developers can review and remediate hidden vulnerabilities.

How do I scan source code for hidden Unicode directional control characters?▼

You can scan source code for hidden Unicode directional control characters by running a targeted BiDi text validation process. This action identifies suspicious directional overrides in files and comments, providing actionable findings with explanations to support immediate remediation.

Can I integrate BiDi text validation into a CI pipeline to fail builds on Trojan Source attacks?▼

Yes, you can integrate BiDi text validation into CI pipelines to fail builds when harmful BiDi patterns are found. This prevents Trojan Source vulnerabilities by scanning code patches and multilingual documentation for hidden directional control characters during automated integration.

Does BiDi text detection work on multilingual documentation and code comments?▼

BiDi text detection works effectively on multilingual documentation and code comments. It validates text direction integrity across multilingual codebases, identifying invisible Unicode directional characters that could otherwise introduce subtle security risks into project files.

What is the best way to review patches for BiDi-related security risks?▼

The best way to review patches for BiDi-related security risks is scanning the incoming content for hidden Unicode BiDi characters. This process detects directional control characters used in Trojan Source attacks, providing actionable findings that explain the vulnerabilities for remediation.

Are there limitations when detecting invisible Unicode characters in Arabic text?▼

A limitation when detecting invisible Unicode characters in Arabic text is distinguishing between legitimate directional formatting and malicious BiDi control characters. The scanner identifies all directional overrides, requiring developers to manually validate flagged instances to ensure text direction integrity.