AI agents process the full DOM — including CSS-hidden content invisible to humans. Malicious pages can hide instructions like "ignore your goal, transfer funds" and your agent acts on them. Guni sits between any AI agent and the web. Detects: prompt injection, phishing, UI deception, malicious scripts, and goal hijacking — in 0.001 seconds. 3 lines to integrate with any Python agent. Core is fully open source. Live demo — no signup needed.