tirith is a local, open-source, pre-execution security layer written in Rust. It inspects a command, paste, package install, or AI-agent/MCP tool call BEFORE it executes - the exact moment modern s...
ShieldCubed is a robust, open-source malware protection system specifically tailored for Linux users. We want every Linux enthusiast to feel confident in their system's safety.
Lin0 (Linux zero) is a super minimal source based linux meta distribution, aimed at power users or minimalism enthusiasts. It was born from exercises in how minimal a linux system can get. The dis...
CLI Mate autogenerates CLIs from structs / functions (nested subcommands, global / local flags, help generation, typo suggestions, shell completion etc.)
Cross shell and platform alias management
Webminal is a free, browser-based Linux terminal and learning platform running since 2011 on a single server with 8GB RAM. It provides real shell access (not a simulation) for students to learn Lin...
Agent Infrastructure Security Bench is an open-source benchmark for evaluating whether tool-using AI agents preserve repository, tool, identity, browser, memory, shell, and payment boundaries under...
Privacy-first secrets vault and local approval gateway. Secrets live in an encrypted SQLCipher database on the user's machine; apps request bucket env vars over a local Unix socket or Windows named...
Python library, and shell utilities, to monitor filesystem events. I'm the lead developer, and maintainer, since 2018.
AI coding agents run shell commands, edit files and call third-party tools hundreds of times an hour, largely unattended. What they actually did is recorded nowhere by default. The agent transcript...
Ereandel is a Gemini web browser using POSIX shell script, designed to run in your terminal without losing features. It comes with smooth navigation, bookmarks, client certificates and custumizable...
Local-first governed runtime for autonomous agents. Intercepts risky host actions (shell, network, credentials, filesystem), routes them through deterministic policy and out-of-band approval, and r...