SIGIL

Automated security auditing for AI agent code

A protective mark for every line of code.
by NOMARK

---

Sigil scans repositories, packages, MCP servers, skills, and agent tooling for malicious patterns **before they reach your working environment**. Nothing runs until it's been scanned, scored, and explicitly approved.

The AI tooling ecosystem moves fast. Developers clone repos from tutorials, install MCP servers with 12 GitHub stars, and pull agent skills from Discord — all of which get direct access to API keys, databases, and cloud credentials. Traditional dependency scanners catch known CVEs but miss the real threat: **intentionally malicious code** designed to exfiltrate credentials, establish backdoors, or execute arbitrary commands via install hooks.

Sigil fills this gap with a **quarantine-first approach**.

Quick Install

**Install via Script (Current):**

# Clone the repository
git clone https://github.com/NOMARJ/sigil.git
cd sigil

# Run the installer — downloads the prebuilt release binary for your
# platform and wires up the Claude Code integration by default
# (opt out with --no-integrations)
./install.sh

# Optional: add gclone/safepip/safenpm shell aliases
./install.sh --with-aliases

**Coming Soon:**

• Homebrew: brew install nomarj/tap/sigil
• npm (macOS/Linux): npm install -g @nomarj/sigil
• curl installer: curl -fsSLO https://www.sigilsec.ai/install.sh && sh install.sh
• Docker: docker pull nomark/sigil:1.2.1

**Note**: The `sig