Is a screen-share AI assistant detectable?
Updated June 2026 · Explainer
“Detectable” is really two questions
People asking whether a screen-share AI assistant is detectable usually mean one of two different things: can the other side see the answer in the shared screen, and can they tell the software is running at all? They have different answers, so it helps to take them one at a time.
Is it visible in the screen capture?
When an overlay uses the Windows WDA_EXCLUDEFROMCAPTURE display-affinity flag, the operating system never hands its pixels to a screen capture. A meeting share, a recording, or a screenshot taken through standard Windows capture surfaces gets the desktop behind the overlay — the answer simply is not in the image. This is the dependable part, because the exclusion happens in the OS compositor rather than in any one app. The mechanics are covered in how to hide a window from screen sharing.
The exception is light, not pixels: a phone or webcam pointed at the monitor, or an external HDMI capture card, records the physical screen and is unaffected by any software flag.
Can they tell the software is installed?
That depends on what “they” can run on the machine. PocketPhantom runs as an ordinary user-space program: it is hidden from Alt-Tab, from the taskbar peek, and from standard capture APIs, and it installs no kernel driver and hooks nothing inside other apps. That is a smaller footprint than tools that do, but we cannot make promises about how any particular security product will classify it — that is the vendor's call, not ours.
On a machine where someone else controls software — a corporate laptop with monitoring agents, or a lockdown tool that enumerates running processes — process-level inspection is a separate channel from the screen capture, and being absent from the capture says nothing about being absent from a process list. Honesty matters here: screen exclusion is not the same as undetectable software.
What about network traffic?
The assistant sends your capture to an AI model and streams an answer back, so there is outbound network activity, the same as any app that calls an online service. With the included hosted AI the request goes to PocketPhantom's relay; with your own key it goes straight to your provider. On a personal network that is unremarkable; on a tightly monitored corporate network, traffic is one more thing an administrator could in principle observe.
The bottom line
Against ordinary screen sharing, recording, and screenshots on your own Windows PC, an OS-excluded overlay is not visible in the capture — that is what the technology is for. It is not a cloak of invisibility against a camera filming your screen, against software running on a machine you do not control, or against the rules of an exam or workplace. Use it where you are entitled to, and know the limits going in.
Want the practical version? See how PocketPhantom works or download it for Windows.
Frequently asked questions
Can Zoom, Teams, or Meet see the AI overlay during a screen share?
No, provided the overlay uses the Windows screen-capture exclusion flag. Those apps capture the screen through standard Windows surfaces, which return blank pixels where the excluded overlay is. Participants see your normal screen.
Could someone tell PocketPhantom is running?
On your own machine it is hidden from Alt-Tab, the taskbar, and screen capture, and installs no kernel driver. On a machine controlled by someone else — for example with monitoring agents or a lockdown tool that lists processes — process inspection is a separate channel from the screen capture.
Does a webcam defeat screen-capture exclusion?
Yes, in the sense that a camera records light from the monitor rather than the desktop image, so a software exclusion flag has no effect on it. The same applies to external HDMI capture hardware.