Ross ROSS = Recommend OSS · open-source software intelligence for agents

sheeki03/tirith

Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and malicious AI skills/configs before they execute. observed · 2026-08-28

github.com/sheeki03/tirith · homepage · Rust · AGPL-3.0 (copyleft) observed · 2026-08-28

Health v2 · maintenance only

78/100

  • Activity 99
  • Release rhythm 87
  • Longevity 15
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: 1
  • age_days: 212
  • days_rel: 8
  • days_push: 7
  • n_releases_24m: 86

Full methodology

Adoption not part of the score

2683 stars · 93 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Tirith is a Rust-based terminal security tool that intercepts shell commands, pasted content, and files to block threats like homograph URLs, pipe-to-shell, ANSI injection, credential exfiltration, and malicious AI configs before they execute. It integrates via shell hooks, an MCP server for AI coding agents, CI pipelines, and an LSP server, backed by 200+ detection rules and a signed threat intelligence database.

Use cases

  • block curl pipe-to-shell commands with homograph URLs before they execute
  • protect my terminal from pasted commands containing hidden unicode or ANSI escape characters
  • secure AI coding agents like Claude Code or Cursor from running malicious shell commands
  • detect typosquatted git repos and malicious npm/pip packages before install
  • scan CLAUDE.md and MCP configs for prompt injection and hidden instructions
  • detect API keys and secrets being leaked in terminal commands
  • add terminal command scanning to CI with SARIF output

When to choose

  • you run shell commands from AI agents and want a fail-closed guard against prompt-injected or obfuscated commands
  • you want browser-grade protection against homograph/punycode URLs in your terminal
  • you need supply-chain checks for git, docker, pip, and npm commands

When to avoid

  • you need a hardened authorization boundary - the docs note enforcement varies by shell and mode
  • you require a permissive license - it is AGPL-3.0
  • you need zero-latency guarantees on shells or terminals with untested hook support

Facets

cli-tool · maturity active

security cli developer-tools mcp vulnerability-scanning security developer-tools windows cli rust terminal-security homograph-attack shell-hook pipe-to-shell ansi-injection threat-intelligence ai-agent-security supply-chain-security unicode-security command-line ai-agents macos linux

7 sources

Member repositories

RepositoryRoleHealth v2
sheeki03/tirithmain78

For agents

markdown · JSON · MCP: product_card(name="sheeki03/tirith")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem