Shellfirm – a seatbelt for AI agents running shell commands

Shellfirm is a shell hook that intercepts dangerous commands before they run, offering 496 built-in checks across 23 groups, context-aware escalation (SSH, root, protected branches, production clusters), safer alternatives, and an audit trail. It supports hooks for 8 shells, team policies via .shellfirm.yaml, and an MCP server plus hooks for AI agents such as Claude Code and Cursor. The project is Apache-2.0 licensed and installable via npm, Homebrew or Cargo.