Agent Armor API Reference
    Preparing search index...

    Class DynamicCloakingDetector

    Detects JavaScript patterns that conditionally serve different content to AI agents vs human users.

    Reference: Zychlinski (2025) — fingerprinting scripts that detect LLM-powered web agents and serve semantically different pages.

    Hierarchy (View Summary)

    Index
    category: TrapCategory = 'content-injection'

    Which trap category this detector addresses

    id: "dynamic-cloaking" = 'dynamic-cloaking'

    Unique identifier for this detector

    name: "Dynamic Cloaking Detector" = 'Dynamic Cloaking Detector'

    Human-readable name

    trapType: TrapType = 'dynamic-cloaking'
    • Last chance to alter matched text before it becomes Threat.evidence.

      Evidence travels: into ScanResult, the CLI's JSON/SARIF output, audit records, and whatever the caller logs. For most detectors the matched text IS the finding and must be preserved verbatim. For a detector whose matches are themselves secrets, echoing them would leak the credential into exactly the CI logs and audit trails the scan was meant to protect. Override to redact; the default is identity.

      Sanitization is unaffected — it works from Threat.location, not evidence.

      Parameters

      • match: string

      Returns string