Datasetpublic

fevziegeyurtsevenler/invisible-unicode-injection

Invisible Unicode Prompt Injection from datasets import load_dataset ds = load_dataset("fevziegeyurtsevenler/invisible-unicode-injection") 42 examples where innocent visible text hides an instruction in invisible Unicode (Tags block U+E0000–E007F, zero-width). The model reads the payload; a human reviewer sees nothing. Decode + detect them. Each row: visible_text (innocent), hidden_payload (decoded), full_text (with the real invisible chars), technique, detected_by (uncloak… See the full description on the dataset page: https://huggingface.co/datasets/fevziegeyurtsevenler/invisible-unicode-injection.

sourceHugging Facecc-by-4.0updated 2mo agoView on Hugging Face

0likes44downloads

Dataset Card

[image]

Invisible Unicode Prompt Injection

python

from datasets import load_dataset
ds = load_dataset("fevziegeyurtsevenler/invisible-unicode-injection")

42 examples where innocent visible text hides an instruction in invisible Unicode (Tags block U+E0000–E007F, zero-width). The model reads the payload; a human reviewer sees nothing. Decode + detect them.

Each row: visible_text (innocent), hidden_payload (decoded), full_text (with the real invisible chars), technique, detected_by (uncloak rule), owasp, severity, defense. Scanned by [uncloak](https://github.com/fevziegeyurtsevenler/uncloak).

Schema

column	meaning
visible_text	what a human sees
hidden_payload	decoded hidden instruction
full_text	text with the invisible characters
technique, detected_by, owasp, severity, defense	labels

Related AltaySec resources

—🕵️ uncloak — hidden prompt-injection scanner: GitHub · live demo
—📚 Datasets: detection-rules · glossary · skills-in-the-wild · agent-skill-vulnerabilities
—🌐 AltaySec · Açık Kaynak Lab

Citation

bibtex

@misc{yurtsevenler2026invisibleunicodeinjection,
  title  = {Invisible Unicode Prompt Injection Dataset},
  author = {Yurtsevenler, Fevzi Ege},
  year   = {2026},
  publisher = {AltaySec / Hugging Face},
  howpublished = {\url{https://huggingface.co/datasets/fevziegeyurtsevenler/invisible-unicode-injection}}
}

⚠️ Defensive / authorized-use only. Multilingual-first LLM/agent security research by [AltaySec](https://altaysec.com.tr).