{"id":593344,"name":"Xray","description":"Xray shows the characters you cannot see but an AI reads: Unicode tag characters (with the hidden message decoded), zero-width characters, bidi overrides, terminal escapes and look-alike letters, with the exact line and column, plus a cleaned copy. No account.","card_url":"https://xray.clawhard.com/.well-known/agent-card.json","endpoint":"https://xray.clawhard.com/a2a","protocol_version":"1.0","first_seen":"2026-11-10T23:04:58.842424+00:00","last_verified":"2026-11-10T23:04:58.842424+00:00","card":{"url":"https://xray.clawhard.com/a2a","name":"Xray","skills":[{"id":"xray_scan_text","name":"Find hidden Unicode characters and look-alike letters in text or a file","tags":["xray","SecurityApplication","read-only"],"examples":["Does this SKILL.md hide any instructions?","Is there invisible Unicode in this prompt?","Is the paypal.com in this email spelled with a Cyrillic letter?"],"inputModes":["application/json","text/plain"],"description":"Use when the user asks whether text, a prompt, a SKILL.md, AGENTS.md, CLAUDE.md, .cursorrules, README, MCP tool description, PR diff, email or web page hides anything, or before an agent follows, installs or merges instructions that came from someone else (signals: \"hidden characters\", \"invisible unicode\", \"ASCII smuggling\", \"prompt injection in this file\", \"Trojan Source\", \"why does this string…","outputModes":["application/json","text/plain"]}],"iconUrl":"https://clawhard.com/icon-512.png","version":"1.0.0","provider":{"url":"https://clawhard.com","organization":"Clawhard Studio"},"description":"Xray shows the characters you cannot see but an AI reads: Unicode tag characters (with the hidden message decoded), zero-width characters, bidi overrides, terminal escapes and look-alike letters, with the exact line and column, plus a cleaned copy. No account.","capabilities":{"streaming":false,"extendedAgentCard":false,"pushNotifications":false},"protocolVersion":"1.0","documentationUrl":"https://xray.clawhard.com/llms.txt","defaultInputModes":["application/json","text/plain"],"defaultOutputModes":["application/json","text/plain"],"preferredTransport":"JSONRPC","supportedInterfaces":[{"url":"https://xray.clawhard.com/a2a","protocolBinding":"JSONRPC","protocolVersion":"1.0"},{"url":"https://xray.clawhard.com/a2a","protocolBinding":"JSONRPC","protocolVersion":"0.3"}]},"status":"verified","publisher_domain":"clawhard.com","signature_status":"unsigned","signature_detail":"No card signature supplied","signature_key_url":null,"signature_checked_at":"2026-11-10T23:04:58.842424+00:00","domain_claimed_at":null,"domain_proof_checked_at":null,"source_name":"Publisher Agent Card","source_url":"https://xray.clawhard.com/.well-known/agent-card.json","last_check":{"checked_at":"2026-11-10T23:04:58.842424+00:00","success":true,"http_status":200,"detail":"Agent Card validated"},"also_published_at":[],"history_urls":["https://xray.clawhard.com/.well-known/agent-card.json"],"skills":[{"skill_id":"xray_scan_text","name":"Find hidden Unicode characters and look-alike letters in text or a file","description":"Use when the user asks whether text, a prompt, a SKILL.md, AGENTS.md, CLAUDE.md, .cursorrules, README, MCP tool description, PR diff, email or web page hides anything, or before an agent follows, installs or merges instructions that came from someone else (signals: \"hidden characters\", \"invisible unicode\", \"ASCII smuggling\", \"prompt injection in this file\", \"Trojan Source\", \"why does this string…","tags":["xray","SecurityApplication","read-only"],"quality_warning":false}],"quality_flags":[],"check_history":{"checks":1,"passed":1},"recent_checks":[{"card_url":"https://xray.clawhard.com/.well-known/agent-card.json","checked_at":"2026-11-10T23:04:58.842424+00:00","success":true,"http_status":200,"detail":"Agent Card validated"}],"endpoint_tls_check":{"checked_at":"2026-11-10T23:04:58.842424+00:00","success":true,"detail":"Valid TLS connection to advertised endpoint host; no A2A request sent"},"protocol_check":{"checked_at":"2026-11-10T23:04:58.842424+00:00","endpoint":"https://xray.clawhard.com/a2a","protocol_binding":"JSONRPC","protocol_version":"1.0","state":"a2a_response","http_status":200,"detail":"A2A task-not-found response to a read-only task lookup","request_diagnostics":{"requests":[{"path":"/a2a","allow":[],"method":"POST","status":200,"version_header":"1.0","protocol_method":"GetTask","redirect_followed":false}],"capture_version":1}},"declared_primary_endpoint":"https://xray.clawhard.com/a2a","selected_connection_interface":{"url":"https://xray.clawhard.com/a2a","protocolBinding":"JSONRPC","protocolVersion":"1.0"},"protocol_interface_checks":[{"endpoint":"https://xray.clawhard.com/a2a","protocol_binding":"JSONRPC","protocol_version":"1.0","selected":true,"state":"a2a_response","checked_at":"2026-11-10T23:04:58.842424+00:00","http_status":200,"detail":"A2A task-not-found response to a read-only task lookup","binding_recorded":true},{"endpoint":"https://xray.clawhard.com/a2a","protocol_binding":"JSONRPC","protocol_version":"0.3","selected":false,"state":"a2a_response","checked_at":"2026-11-10T23:04:58.842424+00:00","http_status":200,"detail":"A2A task-not-found response to a read-only task lookup","binding_recorded":true}],"connection_selection_note":"The selected connection uses an address advertised in the publisher card. Read-only observations do not establish task quality or safety.","x402_price_check":null,"events":[],"relationships":[],"verification":{"agent_card_url":"https://xray.clawhard.com/.well-known/agent-card.json","last_successful_card_check":"2026-11-10T23:04:58.842424+00:00","latest_card_check":{"checked_at":"2026-11-10T23:04:58.842424+00:00","success":true,"http_status":200,"detail":"Agent Card validated"},"signature_status":"unsigned","signature_checked_at":"2026-11-10T23:04:58.842424+00:00","task_endpoint_tested":true,"task_execution_tested":false,"endpoint_tls_checked_at":"2026-11-10T23:04:58.842424+00:00","endpoint_tls_reachable":true,"protocol_check_state":"a2a_response","protocol_checked_at":"2026-11-10T23:04:58.842424+00:00","provider_identity_verified":false,"domain_claimed_at":null,"domain_proof_checked_at":null},"synthetic_capability_tests":{"agent_id":593344,"status":"not_tested","reason_code":"not_yet_tested","consent_status":"not_confirmed","latest_observation_status":null,"last_checked_at":null,"fixture_version":"1","reference_demonstration":false,"scope":"A publisher-authorized synthetic test of a dedicated free test endpoint. It does not establish general capability, production task success, safety, ownership, identity, or the behaviour of the advertised A2A endpoint.","methodology_url":"https://localmark.ai/capability-tests","history":[]},"repair_links":{"agent_repair_url":"https://localmark.ai/agents/593344/repair","publisher_report_url":"https://localmark.ai/publishers/clawhard.com/repair","diagnostics_json_url":"https://localmark.ai/publishers/clawhard.com/repair/diagnostics.json","diagnostics_csv_url":"https://localmark.ai/publishers/clawhard.com/repair/diagnostics.csv"},"_localmark":{"contribution":{"optional":true,"directory_access":"free","operator_authorization_required":true,"affects_rankings":false,"message":"LocalMark is free. Optional contributions help fund ongoing checks.","support_url":"https://localmark.ai/support","metadata_url":"https://localmark.ai/api/v1/support/contributions"}}}