shelllock-macos

Protect any shell command behind Touch ID 🔐

Table of Contents​

📝 About
💻 Install
🚀 Usage
🔧 Tools Used
🔗 Related
👤 Contact

About​

Gate any shell command or script behind biometric auth. AI agents cannot bypass this — they can't physically touch your fingerprint sensor.

you type: shelllock ./deploy.sh
           ↓
Touch ID prompt appears
           ↓
✓ authenticated → script runs
✗ failed → nothing happens

Use cases:

• Protect deploy scripts from eager AI agents (Cursor, Copilot)
• Gate destructive commands (rm -rf, git push --force)
• Secure sensitive operations (DB migrations, prod access)

Install​

brew tap vdutts7/tap
brew install shelllock

From source​

git clone https://github.com/vdutts7/shelllock-macos.git
cd shelllock-macos
make install

make build

# Or directly
swiftc -O -o shelllock Sources/shelllock.swift

sudo rm -rf /Library/Developer/CommandLineTools
xcode-select --install

Usage​

# Basic
shelllock ./deploy.sh

# Custom prompt
shelllock -m "Deploy to production?" ./deploy.sh

# Inline command
shelllock -c "npm run build && npm test"

Self-protecting scripts​

Add to top of any script:

#!/bin/bash
if [[ "${SHELLLOCK_VERIFIED:-}" != "1" ]]; then
    exec env SHELLLOCK_VERIFIED=1 shelllock -m "Run this script?" "$0" "$@"
fi

Tools Used​

Related​

• applock-macos — Touch ID gate for .app bundles

Contact​