CLI Reference

sigil install

Copy the running sigil binary to /usr/local/bin (or the directory given with --path). May require sudo. It creates no data directories: ~/.sigil/quarantine/ is created on the first sigil clone, sigil pip, or sigil npm. For shell aliases, Claude Code wiring, and git hooks, use sigil setup below.

sigil install

# Install to a different directory
sigil install --path ~/.local/bin

sigil setup shell

Append drop-in aliases that route commands through Sigil's quarantine-first workflow to ~/.zshrc or ~/.bashrc (bash or zsh, chosen from $SHELL; other shells get manual instructions). Idempotent — re-running never duplicates the block. ./install.sh --with-aliases writes the same block. Other targets: sigil setup claude (Claude Code plugin), sigil setup git (pre-commit hook, below), and sigil setup all.

sigil setup shell

# Reload your shell (or source the rc file) to activate the aliases

# Manual alternative — add to your rc file yourself:
alias gclone='sigil clone' safepip='sigil pip' safenpm='sigil npm'

Aliases written:

sigil config

View or modify the Sigil configuration, stored as JSON at ~/.sigil/config.json. Running sigil config with no key exits 1 — pass a key or --list.

# Print the whole config file
sigil config --list

# Read one value
sigil config <key>

# Set a value (creates ~/.sigil/config.json if missing)
sigil config <key> <value>

sigil setup git

Install a pre-commit hook in the current repository's .git/hooks that runs sigil scan . --fail-on high before each commit and blocks on HIGH/CRITICAL findings. Skips with a warning if sigil is not on PATH; refuses to overwrite a pre-commit hook it did not write. Bypass a single commit with git commit --no-verify.

cd /path/to/repo
sigil setup git

# Installs .git/hooks/pre-commit, which runs: sigil scan . --fail-on high

sigil clone

Clone a git repository into quarantine and scan it. The clone lands under ~/.sigil/quarantine/; approve it with sigil approve before using the code. Drop-in replacement for git clone.

sigil clone <repo-url> [flags]

# Examples
sigil clone https://github.com/user/repo
sigil clone git@github.com:user/repo.git --branch main
sigil clone https://github.com/user/repo --auto-approve

sigil pip

Download a Python package into quarantine (pip download --no-deps), extract it, and scan it. Nothing is installed into your environment; approve it with sigil approve first. Quarantine-first replacement for pip install.

sigil pip <package> [flags]

# Examples
sigil pip requests
sigil pip flask==3.0.0
sigil pip requests --version 2.32.3

sigil npm

Download an npm package into quarantine (npm pack), extract it, and scan it. Nothing is installed into your project; approve it with sigil approve first. Quarantine-first replacement for npm install.

sigil npm <package> [flags]

# Examples
sigil npm express
sigil npm lodash@4.17.21
sigil npm typescript --version 5.4.5

sigil scan

Scan a directory or file already on disk. Runs all eight analysis phases and outputs a verdict with a risk score. To scan a package or repo, use sigil npm, sigil pip, or sigil clone — they download into quarantine first.

sigil scan <path> [flags]

# Examples
sigil scan ./local-directory
sigil scan ./downloaded-skill/skill.yaml

# Packages and repos go through quarantine commands instead:
sigil npm express
sigil pip requests
sigil clone https://github.com/user/repo

# Gate CI on findings at or above a severity
sigil scan . --fail-on high

# Machine-readable output (global flag)
sigil scan . --format json

sigil fetch

Fetch the latest threat signatures from Sigil cloud. This command does not download arbitrary URLs — use sigil clone, sigil pip, or sigil npm to quarantine code.

sigil fetch

# Re-download even if the local signatures are fresh
sigil fetch --force

sigil list

List quarantined items with their status, ID, source, and source type (git, pip, or npm). IDs are 8-character hex strings. Add --detailed for the path, timestamps, reason, and score.

sigil list

# Output format, one line per entry:
#   <STATUS> [<id>] <source> (<type>)
# e.g. PENDING, APPROVED, or REJECTED, then the 8-character id,
# the package spec or repo URL, and git | pip | npm

# Only pending items, with path, timestamps, reason, and score
sigil list --status pending --detailed

# JSON
sigil list --format json

sigil approve

Approve a pending quarantined item. The code stays at its quarantine path (printed on approval) and its content hashes are pinned in the trust ledger, so later drift from the approved content is detected.

sigil approve <id> [--reason "<text>"]

# <id> is the 8-character id shown by sigil list

sigil reject

Reject a pending quarantined item. Its files are deleted from the quarantine directory and any trust-ledger pin for it is revoked.

sigil reject <id> [--reason "<text>"]

# <id> is the 8-character id shown by sigil list

sigil login

Authenticate with the Sigil cloud API. Required for Pro and Team features including cloud threat intelligence and the web dashboard.

# Interactive login (browser-based device authorization)
sigil login

Logging out

There is no logout subcommand. To clear the stored authentication token and revert the CLI to open-source mode, delete the token file:

rm ~/.sigil/token