Character Removal for Watermark

Apply character-level perturbations to disrupt LLM-embedded watermarks in text.

Updated Feb 11, 2026
One-click install
npx skills add https://github.com/zzw4257/security-skills --skill character-removal-for-watermark
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Character Removal for Watermark
Source: https://github.com/zzw4257/security-skills/tree/main/skills/char-removal-wm
Command: npx skills add https://github.com/zzw4257/security-skills --skill character-removal-for-watermark

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the challenge of detecting and disrupting hidden watermarks embedded within text generated by Large Language Models (LLMs).

Core Features & Use Cases

  • Watermark Disruption: Applies character-level perturbations to text to break or weaken LLM watermarks.
  • Watermark Detection Aid: Can be used in conjunction with detection tools to test the robustness of watermarking techniques.
  • Use Case: A researcher wants to test if a new LLM's watermark can be bypassed. They use this Skill to modify the LLM's output and then attempt to detect the watermark on the modified text.

Quick Start

Run the character removal tool on the provided text file 'output.txt'.

Frequently Asked Questions about Character Removal for Watermark

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I remove watermarks from LLM-generated text?

You can remove LLM watermarks by applying character-level perturbations to the text. This modifies the output at the character level to disrupt or weaken hidden watermarks embedded by Large Language Models.

How does character-level text perturbation disrupt LLM watermarks?

Character-level text perturbation disrupts LLM watermarks by altering specific characters in the generated output. This breaks the statistical patterns and hidden markers that watermarking techniques rely on for detection.

Do I need specific Python libraries to test watermark robustness?

Yes, specific Python libraries are required for text manipulation and watermark analysis to test watermark robustness. These dependencies facilitate the character edits and subsequent detection attempts on the modified text.

Can I use this to test if a new LLM watermark can be bypassed?

Yes, you can test if a new LLM watermark can be bypassed by modifying the LLM's output with character edits. You then attempt to detect the watermark on the modified text to evaluate its robustness.

What is the best way to analyze the robustness of LLM content safety watermarks?

The best way to analyze watermark robustness is by applying character removal techniques to the text and then running detection tools. This process tests how effectively the watermark survives text perturbations.