v1.2.0

Added

• --preset agent-files (Action input preset, pre-commit hook unicode-smuggling-guard-agent-files) scans only agent instruction, skill and MCP config files: SKILL.md, AGENTS.md, CLAUDE.md, GEMINI.md, .claude/, .cursor/, .cursorrules, Copilot instruction and prompt files, mcp.json and others.
• control-token category: chat-template tokens such as <|im_start|>, <start_of_turn> and [INST] that forge conversation turns. Reported in agent files and standard input only.
• - as a path reads standard input, e.g. MCP tool descriptions piped from tools/list.

Usage

- uses: raulkivi/unicode-smuggling-guard@v1
  with:
    preset: agent-files   # optional

npx @modelcontextprotocol/inspector --cli node build/index.js --method tools/list \
  | jq -r '.. | objects | .description // empty' | unicode-smuggling-guard -

v1.1.0

Added

• Python 3.14 support.
• Release assets (wheel and sdist) are attached to each GitHub release with Sigstore signatures (*.sigstore.json).

Removed

• Python 3.9 support; it reached end of life in October 2025.

Usage

- uses: raulkivi/unicode-smuggling-guard@v1

pipx install unicode-smuggling-guard

v1.0.1

Fixed

• Shortened the Action description to under 125 characters so the Action can be listed on GitHub Marketplace.

Usage

- uses: raulkivi/unicode-smuggling-guard@v1

pipx install unicode-smuggling-guard

v1.0.0

Added

• Scanner for six categories of hidden Unicode: tags, variation selectors, bidi controls, zero-width, control and other invisible characters.
• Decoding of tag (ASCII smuggling) and variation-selector (byte smuggling) payloads in reports.
• Legitimate-use rules for emoji presentation, keycaps, emoji ZWJ sequences, non-Latin ZWNJ/ZWJ, subdivision flags and a leading BOM.
• CLI (unicode-smuggling-guard, alias usguard) with text and GitHub annotation output, --ignore and --summary.
• Composite GitHub Action with PR annotations and a job summary table.
• pre-commit hook.

Usage

- uses: raulkivi/unicode-smuggling-guard@v1

pipx install unicode-smuggling-guard