tirith
在执行前阻止注入、同形字符与隐写类攻击，适合开发者防护。
需拦截本地终端输入或代理，可能要求额外权限且产生误报。
拦截并分析终端命令与粘贴内容，检测供应链攻击与混淆输入。
tirith 在 shell 层拦截命令和粘贴内容，实时识别供应链攻击、pipe-to-shell、homograph 域名、ANSI 注入、双向控制/零宽字符和 punycode 欺骗等风险。执行下载脚本、粘贴命令或怀疑仓库被篡改前用它检查并打分、管理信任规则。它作为 shell hook 提供实时防护、说明阻断原因并支持白名单，能把可疑操作拦在执行前。
▸ 展开 SKILL.md 英文原文
Terminal security analysis for shell environments. This skill should be used when checking commands for supply-chain attacks before execution, scanning repositories for hidden content or config poisoning, scoring URLs for homograph attacks, setting up AI tool protection for Claude Code / Cursor / Codex / Windsurf, downloading and executing scripts safely, investigating why tirith blocked a command, managing trusted patterns, running security audits, configuring MCP gateway proxies, or working with threat intelligence databases. Also use when the user mentions "tirith", "pipe-to-shell", "homograph", "ANSI injection", "zero-width", "punycode", "terminal security", "shell hook", "cloaking detection", "supply chain attack", "bidi override", "invisible unicode", or "config poisoning". Even if the user does not explicitly name tirith, use this skill when they ask about protecting shell environments, intercepting dangerous commands, or hardening AI agent tool execution.
帮我安装这个 skill：https://raw.githubusercontent.com/sheeki03/tirith/main/SKILL.mdcurl -fsSL "https://raw.githubusercontent.com/sheeki03/tirith/main/SKILL.md"# tirith — Terminal Security for Developer Environments tirith intercepts shell commands and pasted text, detecting supply-chain attacks before they execute. It catches pipe-to-shell patterns, homograph domains (Cyrillic/Greek lookalikes), ANSI terminal injection, bidi text overrides, zero-width characters, shortened URLs, punycode tricks, and config poisoning. It runs as a shell hook for real-time protection and as a standalone CLI for scanning, scoring, auditing, and AI agent security. ## Quick Start ```bash # Install shell hooks (zsh/bash/fish/powershell/nushell) eval "$(tirith init --shell zsh)" # zsh eval "$(tirith init --shell bash)" # bash tirith init --she