I wrote a tool that could be used like that but it's useless if its not ubiquitous (https://github.com/mmikulicic/runck)
At any rate - code-signing doesn't really help if the author is the attacker.
[1] http://thejh.net/misc/website-terminal-copy-paste