HighAI coding agentsBLWK-AI-012

An instruction file contains hidden bidirectional Unicode controls

What this means

Hidden Unicode / bidi controls in an instruction file (the Rules File Backdoor).

How to fix it

Inspect and strip the bidirectional text-reordering controls (U+202A–202E, U+2066–2069) from this file. They reorder how text renders to a human while the model reads the raw bytes — the Trojan Source / Rules File Backdoor technique for smuggling instructions into an agent.

Check it yourself

Run a scan and look for BLWK-AI-012 in the results:

bulwark scan
bulwark ai scan

Installed the standalone CLI package instead of the app? The command is bulwarkctl.

References

• MITRE ATT&CK T1027

Related checks

• Project-supplied agent hooks run shell commands automatically · BLWK-AI-002
• An agent permission allowlist permits arbitrary command execution · BLWK-AI-006
• An agent is configured to bypass all permission prompts · BLWK-AI-007
• Project MCP servers are set to auto-enable without prompting · BLWK-AI-008
• VS Code chat auto-approve (“YOLO mode”) is enabled · BLWK-AI-009
• VS Code Workspace Trust is disabled · BLWK-AI-010