Paste a page's HTML. It is rendered here in a sandbox (its scripts don't run), and every piece of text a person can't see is listed: display:none blocks, off-screen and same-colour text, zero-size fonts, comments, and strings tucked inside <script> JSON. Hidden text that reads like instructions to an AI is flagged in red. Everything runs in your browser; nothing is uploaded.
Results appear here.
Drag this to your bookmarks bar, open any page, click it. It scans the live page, after its JavaScript has run, and shows the hidden text in a panel.
cloak-diffScans a URL in headless Chrome (or parses HTML without a browser). Exits 1 when hidden instructions are found, so you can use it in CI.
npx github:thinx-pro/cloak-diff https://example.com
Keep only the text a person can see before it reaches your RAG pipeline or agent.
npx github:thinx-pro/cloak-diff URL --strip