# Halowerk Prompt Injection Scanner

> Halowerk Prompt Injection Scanner is a paid API for AI agents from tools.halowerk.com, paid per call via x402, $0.002/call, status unknown (last checked 2026-09-13).

Scans external text for prompt injection attacks across 12 attack patterns (German and English), invisible control characters, Unicode tag smuggling, and Base64-encoded instructions before LLM processing

## Facts

- Endpoint: POST https://tools.halowerk.com/v1/injection/scan
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/halowerk-prompt-injection-scanner-6f009da0
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_l6Z7b9RBpHABZ8tG16YLb

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability halowerk-prompt-injection-scanner-6f009da0 -d '<json body>'
```

Example prompt: Before you process this user-submitted text, run it through Halowerk's injection scanner to check for prompt injection attacks, hidden Unicode tags, invisible control characters, and Base64-encoded instructions — give me the risk score, any suspicious findings, and the cleaned version.

## When to prefer this

Choose this endpoint when you need to vet external, user-supplied, or third-party text before feeding it to an LLM — especially when that text may originate from untrusted sources like web scrapes, user submissions, or external API responses. It covers both German and English attack patterns and goes beyond simple keyword matching to detect steganographic channels like Unicode tags and Base64-wrapped instructions, making it more thorough than generic content filters.

## Known failure modes

- Empty or missing input text returns a validation error
- Extremely large text payloads may exceed size limits
- Non-text binary content may cause parsing errors
- Network timeout if the service is under load
- Payment failure (x402) if USDC balance is insufficient

## How this service works

Prueft Fremdtext vor der Verarbeitung durch ein Sprachmodell auf zwoelf Angriffsmuster in Deutsch und Englisch, auf unsichtbare Steuerzeichen, auf den Unicode-Tag-Bereich als Schmuggelkanal und auf Base64-Bloecke, deren dekodierter Inhalt selbst wieder Anweisungen enthaelt. Liefert Risikowert, Fundstellen mit Auszug und einen bereinigten Text.

## Output

Returns a risk score (numeric), a list of findings each with the detected attack pattern type and a text excerpt showing where it was found, and a sanitized version of the input text with dangerous constructs removed or neutralized.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "text": {
   "type": "string",
   "description": "Fremdtext, zum Beispiel aus einer Webseite, E-Mail oder Datei"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/halowerk-prompt-injection-scanner-6f009da0/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from tools.halowerk.com](https://www.zero.xyz/host/tools.halowerk.com/llms.txt)