Tool · curated 9 Aug 2026

Strip hidden unicode tags from python strings in order to avoid malicious prompt injection attacks

Coverage timeline

9 Aug 2026github.com

Single-source research — first reported, latest, and curated coincide.

Why it matters

Hidden Unicode tag characters are a known vector for smuggling invisible instructions into LLM prompts, and a runnable sanitizer helps defenders neutralize such prompt-injection payloads before they reach a model.

A GitHub gist titled "strip-unicode-tags.py" by user r-leyshon provides a Python script to strip hidden Unicode tag characters from strings in order to defend against malicious prompt injection attacks that abuse invisible/hidden Unicode characters.