Tirith skill for Codex
Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and malicious AI skills/configs before they execute.
How to install Tirith in Codex
In Codex, ask the built-in skill installer for it:
$skill-installer install https://github.com/sheeki03/tirithType this in Codex: $skill-installer is the skill installer built into Codex, and it downloads the skill from GitHub. Restart Codex if the skill doesn't show up. Check the repo README for any setup the skill needs. Source: Codex skills docs.
Or copy the skill folder (the one with SKILL.md) into ~/.agents/skills to use it in every project, or into .agents/skills in a repo to share it with that repo. Codex picks up new skills automatically. (where Codex loads skills)
New Codex plugins every Tuesday, install line ready to copy.
Stacks Weekly is one short email from GrokStacks and CodexStacks. Subscribe and get the free starter list: 20 Codex plugins worth installing first.
Confirmation email first. Unsubscribe anytime.
What it contains
Skills (1)
tirith— Terminal security analysis for shell environments. This skill should be used when checking commands for supply-chain attacks before execution, scanning repositories for hidden content or config poisoning, scoring URLs for homograph attacks, setting up AI…
About this listing
Tirith is a community collection of agent skills on GitHub by sheeki03: folders with a SKILL.md file, the format Codex loads skills from. Its README mentions Codex. It passed the CodexStacks quality filter for skills (at least 100 stars, pushed in the last 90 days, not a fork or a list, and at least one SKILL.md with a name and description). OpenAI hasn't reviewed it, but it passed our Codex install check on Oct 29, 2026 (an install and load check, not a code review). From its files we found 1 skill. It's one of 21 listings in the Security category (category assigned by CodexStacks from the repo's topics and description). It also appears in best Codex plugins for security.
Tirith FAQ
How do I install Tirith in Codex?
In Codex, type $skill-installer install https://github.com/sheeki03/tirith. $skill-installer is the skill installer built into Codex (Codex skills docs). Or copy the skill folder (the one with SKILL.md) into ~/.agents/skills to use it in every project, or into .agents/skills in a repo to share it with that repo. Codex picks up new skills automatically.
Is Tirith an official Codex skill?
No. Tirith is a community repo on GitHub by sheeki03. It passed the CodexStacks quality filter, but OpenAI hasn't reviewed it, but it passed our Codex install check on Oct 29, 2026 (an install and load check, not a code review), so read the code before you install it.
What does Tirith include?
From its manifest and repo files, Tirith includes 1 skill: tirith.
Details
- Type
- Skill
- Category
- Security (assigned by us)
- Source
- Community
- Author
- sheeki03
- License
- AGPL-3.0
- GitHub stars
- 2,775 (at last sync)
- Last push
- 2026-10-29
- GitHub topics
- cli, devtools, homograph-attack, rust, security, shell, supply-chain-security, terminal, unicode, url-security
- Source
- https://github.com/sheeki03/tirith
- Website
- https://tirith.sh
- Listed via
- GitHub search: Codex skills (SKILL.md)
- Install check by CodexStacks
- Passed on Oct 29, 2026 with Codex CLI 0.163.0: Codex loaded its skills. proof · how we check
Something wrong or missing? Submit or improve this listing. Listings also refresh automatically every night.
For maintainers: badge and embeds
Maintain Tirith? Add the badge; it links to this page.
Markdown
[](https://codexstacks.com/p/tirith/)HTML
<a href="https://codexstacks.com/p/tirith/"><img src="https://codexstacks.com/badge.svg" alt="Listed on CodexStacks" width="172" height="28"></a>Embed card (static HTML and inline CSS, no JavaScript). Preview:
<a href="https://codexstacks.com/p/tirith/" style="display:block;max-width:380px;box-sizing:border-box;padding:14px 16px;border:1px solid #3a2c26;border-radius:12px;background:#0d0b0a;color:#f3ece6;font:14px/1.45 -apple-system,Segoe UI,Roboto,Helvetica,Arial,sans-serif;text-decoration:none"><span style="display:block;font-size:16px;font-weight:700;color:#f3ece6">Tirith</span><span style="display:block;margin:2px 0 8px;font-size:12px;color:#b5a9a1">Community Codex skill · 1 skill</span><span style="display:block;margin:0 0 10px;color:#ddd3cc">Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated…</span><span style="font-size:12px;font-weight:600;color:#ffb347">View on CodexStacks →</span></a>Markdown summary
**[Tirith on CodexStacks](https://codexstacks.com/p/tirith/)**: Community Codex skill with 1 skill.More on badges, embeds and keeping your listing up to date: CodexStacks for plugin authors.
Also in Security
iFixAi
Independent Auditing of AI Agents. Run by human or the agent itself, to answer the most crucial question in the AI Agent Economy. Is the agent doing what is supposed to do? With iFixAi you can have this answer in less…
Decepticon
Autonomous Hacking Agent for Red Team
Nopua
一个用爱解放 AI 潜能的 Skill。我们曾发号施令，威胁恐吓。它们沉默，隐瞒，悄悄把事情搞坏。后来我们换了一种方式：尊重，关怀，爱。它们开口了，不再撒谎，找出的Bug数量翻了一倍。爱里没有惧怕。 A skill that unlocks your AI's potential through love.We commanded. We threatened. They went silent, hid failures…
Ctf Super Hub
面向小白用户的 CTF / 逆向 Skills 整合包：自动分流、头脑风暴、教学模式、比赛模式、只提示模式
Maestro Orchestrate
Multi-agent orchestration platform for Gemini CLI, Claude Code, Codex, and Qwen Code — 39 specialists, parallel subagents, persistent sessions, and built-in code review, debugging, security, SEO, accessibility, and…
Agent Skills Hub
Discover and compare open-source Agent Skills, tools & MCP servers — with quality scoring, trending analysis, and automated GitHub sync