secure-skill-content-sanitization

What problem does it solve?

Prevents invisible or obfuscated content in markdown, HTML, and text files from silently influencing AI agents by detecting and neutralizing CSS-hidden text, HTML comments and interactive blocks, zero-width and bidi characters, homoglyphs, and misleading links before content enters agent context.

Core Features & Use Cases

• Preprocessing Sanitization: Strips HTML, extracts and scans comments, expands collapsed content, and normalizes Unicode to eliminate hidden instruction channels.
• Attack Detection: Flags CSS-hidden elements, javascript/data links, image-based exfiltration, zero-width characters, bidi overrides, and homoglyph obfuscation with severity levels (CRITICAL / HIGH).
• Use Case: Run during a repository skill audit or CI pre-commit to block or require review for any file containing invisible instructions or link-based exfiltration attempts.

Quick Start

Run a repository sanitization: sanitize the README.md and all .md/.html files, remove zero-width characters, extract comments for review, and produce a findings report.