This rule detects inbound messages containing hidden text inserted via CSS clip-path: inset(100%). It analyzes the HTML body of inbound content for a div whose style attribute includes clip-path, with a regex matching clip-path:\s*inset\s*\(\s*100%\s*\) and requires the associated inner text length to exceed 150 characters. The intent is to identify attempts to visually hide large blocks of content from readers while keeping the text in the DOM, a tactic commonly used to bypass content-based filters and detection engines. When matched, the rule raises medium severity alerts for Spam and Credential Phishing scenarios, reflecting the risk that hidden text may conceal malicious payloads, phishing prompts, or filler content used to mislead. The rule relies on HTML analysis coupled with content analysis to extract and inspect DOM structure and text content. Potential legitimate uses exist (e.g., CSS-based visual effects), so a higher threshold of hidden content length and context analysis are recommended to reduce false positives. This technique is part of evasion tactics used by attackers to evade automated screening and deliver payloads or deceptive messages. Operators should combine this with reputation checks and content quality signals, and consider normalizing or stripping hidden text during preprocessing, while preserving legitimate design intent. Expected detections include inbound messages such as emails or chat payloads containing hidden text blocks that exceed the 150-character threshold.