A lightweight security auditor and sandbox for shell scripts. Oversight combines a Static Analysis engine (Rust) with Dynamic Enforcement (Linux Landlock) to keep your system safe from malicious scripts.
Oversight is a terminal security intelligence tool and intelligent code pager designed to audit shell scripts and package upgrade streams before they execute on your system. It bridges the gap between blind trust and tedious manual auditing with real-time heuristic analysis and interactive review.

PKGBUILD and .install scripts.yay -S oversight-git
git clone https://github.com/Rakosn1cek/oversight.git
cd oversight
chmod +x install.sh
./install.sh
# Audit a local shell script
oversight ./install.sh
# Audit a remote script safely in memory
oversight https://raw.githubusercontent.com/example/repo/main/install.sh
# Pipe git diffs or manual pages directly
git diff | oversight
To use Oversight as your diff pager during package upgrades, add the alias to your shell profile:
# For Yay (~/.zshrc or ~/.bashrc)
alias yay="yay --diffpager oversight"
For Paru, add these lines to ~/.config/paru/paru.conf:
[options]
Pager = oversight
CombinedUpgrade
| Key / Input | Context | Action |
|---|---|---|
↓ / ↑ | Pager Mode / Tabs | Scroll viewport line by line |
↓ / ↑ | Findings View | Navigate between flagged findings |
j / k | All Views | Scroll viewport line by line |
PageDown / Space | All Views | Scroll viewport down by one page |
PageUp / b | All Views | Scroll viewport up by one page |
d / u | All Views | Scroll viewport down or up by half page |
Home / g / ← | All Views | Jump to top of stream |
End / G | All Views | Jump to bottom of stream |
Tab / 0-9 | Multi-Package | Cycle or jump to package tabs |
s | Findings View | Toggle suppression of selected finding |
| Mouse Wheel | All Views | Scroll viewport smoothly by 3 lines |
q / Esc | All Views | Exit Oversight |
For detailed architecture guides, custom signature authoring (rules.json), global system pager configuration, and troubleshooting, visit the official documentation website:
👉 https://rakosn1cek.github.io/oversight/
Contributions, rule submissions, and feedback are welcome.
MIT © 2026 Rakosn1cek. Attribution is required for any redistribution or derivative works.