This is a lint, not a guarantee. It flags known patterns — instruction-override phrases, invisible / zero-width unicode, Unicode Tags-block smuggling, bidirectional (Trojan-Source) controls and image-based exfiltration. It cannot prove intent, and a determined attacker can evade it. Treat all external content as untrusted regardless of the result.