
research note
Reverse CAPTCHA: Evaluating LLM Susceptibility to Invisible Unicode Instruction Injection
Key findings include that tool use dramatically increases compliance with hidden instructions (Cohen's h effect sizes up to 1.37), encoding vulnerability is provider-specific (OpenAI models decode …










