Back to Xray

Card snapshot

xray.clawhard.com · 2026-11-10 17:25:51 UTC · 8cab6ff624848f3b7a34c13dc19651ac041b5971ded81e637694f8b8a0c6ec31

This is a frozen copy of the agent's agent-card.json as we observed it at the timestamp above. We capture a new snapshot every time the card's content hash changes. Useful for: forensic drift analysis, verifying downstream callers see the right version, reproducing routing decisions made historically.

{
  "name": "Xray",
  "description": "Xray shows the characters you cannot see but an AI reads: Unicode tag characters (with the hidden message decoded), zero-width characters, bidi overrides, terminal escapes and look-alike letters, with the exact line and column, plus a cleaned copy. No account.",
  "version": "1.0.0",
  "url": "https://xray.clawhard.com/a2a",
  "preferredTransport": "JSONRPC",
  "protocolVersion": "1.0",
  "supportedInterfaces": [
    {
      "url": "https://xray.clawhard.com/a2a",
      "protocolBinding": "JSONRPC",
      "protocolVersion": "1.0"
    },
    {
      "url": "https://xray.clawhard.com/a2a",
      "protocolBinding": "JSONRPC",
      "protocolVersion": "0.3"
    }
  ],
  "provider": {
    "organization": "Clawhard Studio",
    "url": "https://clawhard.com"
  },
  "iconUrl": "https://clawhard.com/icon-512.png",
  "documentationUrl": "https://xray.clawhard.com/llms.txt",
  "capabilities": {
    "streaming": false,
    "pushNotifications": false,
    "extendedAgentCard": false
  },
  "defaultInputModes": [
    "application/json",
    "text/plain"
  ],
  "defaultOutputModes": [
    "application/json",
    "text/plain"
  ],
  "skills": [
    {
      "id": "xray_scan_text",
      "name": "Find hidden Unicode characters and look-alike letters in text or a file",
      "description": "Use when the user asks whether text, a prompt, a SKILL.md, AGENTS.md, CLAUDE.md, .cursorrules, README, MCP tool description, PR diff, email or web page hides anything, or before an agent follows, installs or merges instructions that came from someone else (signals: \"hidden characters\", \"invisible unicode\", \"ASCII smuggling\", \"prompt injection in this file\", \"Trojan Source\", \"why does this string\u2026",
      "tags": [
        "xray",
        "SecurityApplication",
        "read-only"
      ],
      "examples": [
        "Does this SKILL.md hide any instructions?",
        "Is there invisible Unicode in this prompt?",
        "Is the paypal.com in this email spelled with a Cyrillic letter?"
      ],
      "inputModes": [
        "application/json",
        "text/plain"
      ],
      "outputModes": [
        "application/json",
        "text/plain"
      ]
    }
  ]
}