mirror of
https://github.com/NousResearch/hermes-agent.git
synced 2026-11-06 05:17:15 +00:00
40 lines
1.8 KiB
YAML
40 lines
1.8 KiB
YAML
name: tirith
|
|
repo: https://github.com/sheeki03/hermes-plugin-tirith
|
|
sha: 42862b4e49cc5a46985973d982e2bf3969ad724f
|
|
subdir: tirith
|
|
version: "0.1.1"
|
|
title: tirith
|
|
description: >-
|
|
Check every terminal command with your installed tirith before it runs: lookalike and homograph
|
|
URLs, pipe-to-shell, obfuscated execution, credential and .env exfiltration, malicious packages and
|
|
terminal injection. tirith blocks and required policy approvals go to Hermes's approval prompt,
|
|
critical findings are refused, warnings run with the warning added to the result; unattended runs
|
|
follow approvals.*_mode.
|
|
Disclosure — runs the user-installed tirith binary (0.5.0 or later; never downloaded, installed or
|
|
updated by the plugin) on every terminal command and completed shell command sent to a background
|
|
terminal, in the command's working directory, with the command on stdin; tirith logs each check
|
|
locally and, unless offline is set, may refresh its signed threat
|
|
database, query OSV.dev, deps.dev and ecosyste.ms, download the CISA KEV feed, and query Google
|
|
Safe Browsing (only with your key); fails closed (asks, or refuses when unattended) if tirith is
|
|
missing, older than 0.5.0, times out or gives no verdict.
|
|
maintainer: sheeki03
|
|
tier: community
|
|
category: tools
|
|
requires_hermes: ">=0.21.5"
|
|
docs_url: https://github.com/sheeki03/hermes-plugin-tirith/blob/main/tirith/README.md
|
|
readme: true
|
|
platforms: []
|
|
known_issues:
|
|
- >-
|
|
Hermes 0.21.5 still runs a built-in tirith check before plugins; run
|
|
`hermes config set security.tirith_enabled false` so each command is not checked twice.
|
|
Hermes 0.21.6 and later do not have it.
|
|
capabilities:
|
|
provides_tools: []
|
|
provides_hooks:
|
|
- pre_tool_call
|
|
- post_tool_call
|
|
- transform_tool_result
|
|
provides_middleware: []
|
|
requires_env: []
|