Skip to content

v0.1.0

Choose a tag to compare

View all tags
@mohamedzhioua mohamedzhioua released this 03 Jul 19:11
v0.1.0
20f3414

rulesentry catches hidden and invisible-unicode instructions smuggled into AI coding-agent config and skill files — CLAUDE.md, AGENTS.md, .cursorrules, copilot-instructions.md, .mcp.json, SKILL.md. Zero-config, zero runtime dependencies, MIT.

npx rulesentry demo     # safe built-in sample
npx rulesentry scan     # scan your repo

Highlights

  • Rules RS001–RS022: zero-width & invisible chars, bidirectional overrides (Trojan Source), Unicode Tag ASCII smuggling (decoded), variation-selector byte channels (decoded), homoglyph/mixed-script confusables, the !`command` dynamic-context execution prefix, and remote/obfuscated exec strings.
  • "What you see vs. what the agent reads" reveal diff with decoded payloads and exact UTF-8 byte offsets.
  • Output: pretty (quiet-by-default) / JSON / SARIF 2.1.0 for GitHub code scanning.
  • GitHub Action + pre-commit hook.
  • Hardened via an independent security review (no ReDoS; O(1)-per-file rendering; terminal-escape sanitization; size caps). 74 tests on Node 18/20/22 × Linux/Windows.
  • Dogfooded on a 129-file AI-agent repo — clean at medium+.
Assets 2
Loading