Repolode
Предложить
kaplanelad

kaplanelad/shellfirm

A shell guardrail that intercepts dangerous terminal commands from humans and AI coding agents and requires confirmation before running them.

Открыть на GitHubСайт
Звёзды
948
Форки
33
Открытые issues
3
Последний коммит
5 месяцев назад

Что это?

shellfirm sits between you and your shell and checks commands before they run. When a command matches one of its built-in patterns, such as recursive deletes, force pushes, or destructive Kubernetes, Terraform, Docker, or database operations, it shows the severity, the affected scope, and a safer alternative, then asks you to solve a small challenge before continuing.

It supports Zsh, Bash, Fish, Nushell, PowerShell, Elvish, Xonsh, and Oils. Protection can be raised automatically in higher-risk contexts such as SSH sessions, root shells, protected git branches, or production Kubernetes clusters. Teams can share rules through a .shellfirm.yaml file, and every intercepted command and decision is written to a JSON-lines audit log.

For AI agents, `shellfirm connect claude-code` installs a hook that checks Bash commands before execution and registers an MCP server exposing tools to check, explain, and suggest alternatives for commands.

Ключевые возможности

  • 01Detects 100+ risky command patterns across filesystem, git, Kubernetes, Terraform, Docker, AWS, GCP/Azure, Heroku, and databases.
  • 02Supports eight shells, including Zsh, Bash, Fish, Nushell, and PowerShell.
  • 03Raises challenge difficulty in SSH, root, protected-branch, and production Kubernetes contexts.
  • 04Shows safer alternative commands alongside each warning.
  • 05Shares team safety rules through a .shellfirm.yaml project policy that can only add restrictions.
  • 06Logs every intercepted command and decision as JSON lines.

Сценарии использования

  • Protecting your own terminal from accidental destructive commands like rm -rf or force pushes.
  • Letting Claude Code or other AI agents run shell commands with a safety check on each Bash call.
  • Enforcing shared safety rules for a team's production infrastructure work.
  • Reviewing an audit trail of risky commands run in a shared environment.

Темы

#shell#terminal#safety#devops#cli#mcp#kubernetes#git#agent#ai

Частые вопросы

Что такое shellfirm?
A shell guardrail that intercepts dangerous terminal commands from humans and AI coding agents and requires confirmation before running them. shellfirm sits between you and your shell and checks commands before they run. When a command matches one of its built-in patterns, such as recursive deletes, force pushes, or destructive Kubernetes, Terraform, Docker, or database operations, it shows the severity, the affected scope, and a safer alternative, then asks you to solve a small challenge before continuing.
shellfirm можно использовать бесплатно? Какая у него лицензия?
shellfirm распространяется с открытым исходным кодом под лицензией Apache-2.0. Перед использованием в коммерческих продуктах проверьте условия лицензии.
shellfirm всё ещё поддерживается?
Обновлялся за последние 6 месяцев. Последний коммит в shellfirm — 15 мая 2026 г..
Для чего можно использовать shellfirm?
Protecting your own terminal from accidental destructive commands like rm -rf or force pushes. Letting Claude Code or other AI agents run shell commands with a safety check on each Bash call. Enforcing shared safety rules for a team's production infrastructure work. Reviewing an audit trail of risky commands run in a shared environment.
Где скачать shellfirm?
Исходный код и инструкции по установке — на GitHub: https://github.com/kaplanelad/shellfirm

Описание создано ИИ на основе README проекта. Статистика GitHub обновляется ежедневно.

Похожие проекты