That's exactly how Lakera's gandalf demo works: https://gandalf.lakera.ai/

It's pretty decent in practice, but determined humans can work around it with some effort.