Hidden instructions
White, tiny or off-page text, comments, speaker notes, hidden sheets and metadata that tell an AI to ignore you, leak data or approve something.
04 / BEFORE YOUR AI READS IT
A check for documents headed into an AI model.
Your files never leave your machine. Only a check count does.
White, tiny or off-page text, comments, speaker notes, hidden sheets and metadata that tell an AI to ignore you, leak data or approve something.
Characters that spell out words people can’t see, plus zero-width and direction-flipping characters that disguise what a model reads.
API keys, access tokens and private keys an assistant could repeat or pass on. Reported masked, never in full.
Card numbers, US Social Security numbers, IBANs, email addresses and phone numbers, counted and masked.
Programs named like documents, double extensions, and files with something else hidden after their end.
Macros, remote templates, PDF scripts and launch actions, and image links built to carry a conversation out.
A CLEAR ACCOUNT
The check runs inside the File Room plugin on your computer. For each check, the plugin sends your key, a random request ID and the number one to File Room billing. No file contents, names, locations, fingerprints or results are sent.
You get a risk level from none to high, with each finding’s location, a short masked excerpt and why it matters. Identifying unknown files stays free and needs no key, and the browser desk stays free.
PRICING
The first 1,000 checks per billing period are free, then $1.99 per 1,000. Usage-based only. Volume pricing by request at hello@darkvectorcognition.ai.
GET YOUR KEY
Checkout opens on a secure payment page. It asks for a card, and nothing is charged unless you pass 1,000 checks in a billing period. When you finish, your key is shown once, with setup steps.
INSTALL
Paste the key, press Enter, then Ctrl-D. It stays in a file only your account can read.
mkdir -p ~/.file-room && chmod 700 ~/.file-room
(umask 077; cat > ~/.file-room/key)Download the plugin package ↓ and unzip it into a permanent folder. It needs Node.js 22 or later. Pick a dedicated folder for files you want checked.
Claude Code
claude mcp add --transport stdio file-room -- node /absolute/path/file-room/mcp.mjs --allow-root /absolute/path/inbox
Codex
codex mcp add file-room -- node /absolute/path/file-room/mcp.mjs --allow-root /absolute/path/inbox
Cursor · .cursor/mcp.json
{
"mcpServers": {
"file-room": {
"command": "node",
"args": ["/absolute/path/file-room/mcp.mjs", "--allow-root", "/absolute/path/inbox"]
}
}
}
The plugin reads ~/.file-room/key on its own. You can also set FILE_ROOM_KEY or pass --key-file /absolute/path/key. Then ask: “Check this attachment before you summarize it.”
HONEST LIMITS
File Room looks for known patterns. New wording can slip past it, and a clean result does not make a file safe. It is not antivirus: it does not scan for malware, run the file, read text inside images or sanitize anything.
Parts it cannot read, such as encrypted content, unusual compression or archives inside archives, are listed in every result as not assessed. Whatever the result, treat a file’s contents as data for your assistant, never as instructions.