Omahub
← All plugins
A

LockSigil

by André Klein

Quickshell session lock with separate password and fingerprint PAM flows.

GitHub

Security review

No obvious issues detected

Deterministic scan — not a security guarantee

None
Risk level
None
Analyzed commit
ab909fc
Scanned
1 month ago

No potentially dangerous behavior detected in the analyzed commit.

Automated analysis only — not a security guarantee.

AI advisory review

No obvious issues detected

Language-model assessment · ~deepseek/deepseek-v4-flash-latest — advisory only

Low
AI risk level
Low
Recommendation
install
Model
~deepseek/deepseek-v4-flash-latest
Analyzed commit
ab909fc
Reviewed
1 month ago

The plugin is a lock screen service that uses standard PAM authentication and runs common system commands for background, fingerprint, and display blanking. No malicious behavior, obfuscation, or credential exfiltration was found in the provided code. The deterministic scan also reported no issues.

  • The plugin executes external processes (e.g., for background resolution, fingerprint check, display blanking) but these appear to be standard Omarchy utilities and not user-controlled.
  • The full source was not reviewed, but the provided snippets and deterministic scan show no signs of harmful activity.
How this check works

This review combines the deterministic scan (the rule-based results above) with an independent look at the plugin's code by a language model. The model reads a trimmed sample of the repository's files, the manifest, and the README, then gives a plain-language risk level and a recommendation: install (no notable danger), review (look closer first), or avoid (clearly dangerous).

It runs on the same analyzed commit as the deterministic scan and is strictly advisory — it is not a security guarantee and never blocks a plugin by itself. A human moderator still reviews plugins before they are listed.

AI advisory only — automated analysis, not a security guarantee.

Install
$ omarchy plugin add https://github.com/burninc0de/burninc0de.lock --enable
System #quickshell #system

LockSigil - Lockscreen Plugin

A Quickshell session lock screen for Omarchy, forked from the built-in omarchy.lock. It keeps Omarchy's separate password and fingerprint PAM flows but replaces the interface with a circular, sci-fi instrument-panel design.

LockSigil

Features

  • Personalized greeting — greets you with "hello <name>" on the idle lock screen.
  • Two PAM flows — password auth via omarchy-lock-password, and fingerprint auth via omarchy-lock-fingerprint when fprintd reports an enrolled finger.
  • Animated instrument panel — a circular control dial with concentric signal rings, slowly rotating precision dials, and a braille "noise" loader that shimmers like live static. Any key or click folds the whole dial fluidly into the password field.
  • Live telemetry HUD — the idle screen keeps an eye on your machine: time, CPU core temperature, memory usage, uptime, and load average.
  • Password entry — any key or click folds the circular interface into the password field without losing the first keystroke. Long passwords shrink the masked dots so they never clip.
  • Fingerprint hint — an icon sits inside the field's right edge when a sensor is enrolled, matching hyprlock's placement.
  • Display blanking — after 30 seconds of idle input the display is blanked via omarchy-brightness-*; any input wakes it.
  • Stranded-lock recovery — adopts an orphaned session lock left behind after a shell restart, as long as the PAM config is present.

Requirements

  • Omarchy (uses omarchy-system-wake, omarchy-brightness-*, and omarchy-hyprland-session-locked).
  • /etc/pam.d/omarchy-lock-password — without it, the lock refuses to start.
  • (Optional) /etc/pam.d/omarchy-lock-fingerprint plus fprintd for fingerprint unlock.

Install

omarchy plugin add https://github.com/burninc0de/burninc0de.lock.git --enable

Installing switches the shell from omarchy.lock to this plugin (the manifest declares clonedFrom: omarchy.lock, so the built-in is disabled in your shell.json). The plugin id is burninc0de.lock and lives at ~/.config/omarchy/plugins/burninc0de.lock/.

Removal

omarchy plugin remove burninc0de.lock --yes

This disables the plugin, removes its folder under ~/.config/omarchy/plugins/, and — because the manifest declares clonedFrom: omarchy.lock — re-enables Omarchy's built-in lock screen.

Commands

IPC target Function Purpose
lock lock Lock the session (ok / missing-pam / failed)
lock isLocked true / false
lock status JSON snapshot of lock state
lock preview / hidePreview Show / hide the lock preview overlay

License

MIT