Cloakcheck
Scan a page for content planted to hijack an AI browsing/shopping agent before it acts on the page.
- Transport
- Not stated
- Package
- —
- Registry id
- com.edgethirteen.www/cloakcheck
No install snippet on purpose. A working MCP config is a command, its arguments and an environment block — the last two are where API keys live, so this catalogue never stores them and cannot publish them. Follow the link above for the authors' own instructions.
The tool checks your own published content for payloads designed to manipulate AI agents visiting your site. The scan examines three signal classes: invisible unicode, CSS-hidden elements with instruction-shaped language, and instruction-shaped phrases in attributes or meta tags. The tool does not flag legitimate accessibility labels or hidden menus unless they also contain instruction-shaped language.
Pages are fetched fresh at scan time and nothing beyond the URLs submitted is retained.
Summary drafted from the project's own website. Every sentence is backed by text on that page and was reviewed before publishing.