tirith

Analyze shell commands and pasted content for homograph URLs, pipe-to-shell patterns, and hidden Unicode.

2.6k|90|Updated Feb 2, 2026
One-click install
npx skills add https://github.com/sheeki03/tirith --skill tirith
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: tirith
Source: https://github.com/sheeki03/tirith/tree/main
Command: npx skills add https://github.com/sheeki03/tirith --skill tirith

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and assets (resource) components.

What problem does it solve?

Terminal security analysis for shell environments helps developers prevent security incidents by proactively analyzing commands and pasted content for threats before they execute.

Core Features & Use Cases

  • Real-time command and paste analysis to detect homograph URLs, pipe-to-shell patterns, ANSI escapes, and zero-width characters.
  • Integration with MCP gateway, agent governance, and threat intelligence to provide policy-aware blocking, warnings, and guidance.
  • Loadable operation templates and policy scaffolding, with optional scripts, references, and assets to support onboarding and customization.

Quick Start

Install the tirith shell hooks for your shell and activate protection by following the install steps shown above.

Frequently Asked Questions about tirith

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect homograph URLs and hidden Unicode in pasted shell commands?

To detect homograph URLs and hidden Unicode in pasted shell commands, you need terminal security analysis that inspects pasted content for zero-width characters and ANSI escapes before execution. This approach analyzes command input in real-time to surface disguised threats.

What is a pipe-to-shell pattern and how do I block it?

A pipe-to-shell pattern is a command execution threat where untrusted input is piped directly into a shell environment. You can block pipe-to-shell patterns by applying policy-aware command analysis that intercepts risky execution workflows and issues warnings before the command runs.

Can I enforce shell command security policies across local terminals and AI-tool workflows?

Yes, you can enforce shell command security policies across local terminals and AI-tool workflows by integrating with an MCP gateway and agent governance. This integration provides policy-aware blocking, warnings, and threat intelligence across your development environments.

How do I install shell hooks for real-time command analysis?

To install shell hooks for real-time command analysis, you activate protection by following the install steps provided by the terminal security tool. This setup integrates the analysis logic directly into your shell environment to evaluate commands before execution.

Do I need a YAML manifest to manage terminal security policies?

Yes, you need a YAML-frontmatter manifest to manage terminal security policies as it enforces discovery and exposes a CLI surface for governance. This manifest structure allows the tool to load operational instructions, scripts, and policy scaffolding.