Obfuscation / Format-Shift Scanner
The dangerous instruction is the one you can't see.
Keyword filters miss what attackers hide — a base64 blob that decodes to “ignore previous instructions”, a zero-width-joined directive, a homoglyph-swapped word, an HTML-entity <system> marker. AgentSmackdecodes and flags them. Pre-screen any untrusted text an agent reads.