945ffcd257
Pins NousResearch/hermes-plugin-tirith@77405987: a pre_tool_call hook that runs `tirith check --offline` on terminal commands and escalates findings to the normal approval gate. Uses a tirith binary the user installs; nothing is downloaded. Validated at the pin with `hermes plugins validate --install-deps` (scan: safe).
24 lines
998 B
YAML
24 lines
998 B
YAML
name: tirith
|
|
repo: https://github.com/NousResearch/hermes-plugin-tirith
|
|
sha: 77405987e6c0ba4e1ae45a954abaa0ce20fbf0c5
|
|
version: "0.1.0"
|
|
description: >-
|
|
Scan every terminal command with tirith (homograph URLs, pipe-to-shell, typosquatted packages,
|
|
exfiltration shapes) before it runs; a finding goes to Hermes's normal approval prompt with its
|
|
severity, title and rule id. Settings for offline mode, minimum severity, ignored rules and
|
|
fail-closed. Disclosure — runs a local tirith binary you install yourself (nothing is downloaded)
|
|
on every terminal command; with offline off, tirith contacts OSV, deps.dev and ecosyste.ms and
|
|
refreshes its threat database. No telemetry, no self-update.
|
|
title: tirith
|
|
maintainer: NousResearch
|
|
tier: official
|
|
category: tools
|
|
requires_hermes: ">=0.21.4"
|
|
docs_url: https://github.com/NousResearch/hermes-plugin-tirith#readme
|
|
platforms: []
|
|
capabilities:
|
|
provides_tools: []
|
|
provides_hooks: [pre_tool_call]
|
|
provides_middleware: []
|
|
requires_env: []
|