bastion-ai-security 0.1.3

Supply-chain security, capability intelligence, and trust system for AI agents

Bastion AI

Supply-chain security, capability intelligence, and trust system for AI agents.

Bastion AI protects bot-first ecosystems by detecting malicious or risky skills/plugins/tools, tracking capability drift over time, and producing machine-readable security artifacts (Dynamic AIBOM).

Installation

pip install bastion-ai-security

For JavaScript/TypeScript analysis support:

pip install bastion-ai-security[js]

PyPI: https://pypi.org/project/bastion-ai-security/

Quick Start

Initialize a project

cd your-agent-project
bastion init

This creates a .bastion/ directory with project configuration and prepares for scanning.

Scan for risks

bastion scan

Bastion auto-discovers plugins, skills, and tools in your project and analyzes them for:

• System execution — subprocess, os.system, child_process, etc.
• Network access — requests, fetch, urllib, etc.
• Secret/environment access — os.environ, process.env, dotenv, etc.
• Dynamic code execution — eval, exec, Function constructor, etc.
• Obfuscation patterns — base64+exec, encoded strings, etc.

Check project status

bastion status

Connect to Bastion Cloud

bastion connect

Enables continuous monitoring, trust scores, and dashboard access at https://bastion-ai-hub.replit.app.

How It Works

Plugin Discovery

Bastion automatically finds plugins by scanning:

• Known framework directories (skills/, tools/, plugins/, extensions/)
• Framework-specific patterns (OpenClaw, LangChain, AutoGPT, CrewAI)
• File naming conventions (*_skill.py, *_tool.js, etc.)

Capability Analysis

Each discovered plugin is analyzed using:

• Python: AST-based static analysis
• JavaScript/TypeScript: esprima parsing with regex fallback

Risk Levels

Level	Description
Critical	System execution, dynamic code, obfuscation detected
High	Network access, secret/env access detected
Medium	New plugin without dangerous capabilities
Low	No risky capabilities detected

Drift Detection

On subsequent scans, Bastion compares against the baseline to detect:

• New plugins added since last scan
• Modified plugins with changed capabilities
• Removed plugins no longer present

Generated Artifacts

All artifacts are written to .bastion/:

File	Description
security_state.json	Overall security posture
capability_surface.json	All plugin capabilities
drift_summary.json	Changes since last scan
aibom.json	Dynamic AI Bill of Materials
events.log.jsonl	Rolling event log
baseline.json	Baseline for drift comparison

CI/CD Usage

bastion init
bastion scan --ci

Exit codes:

• 0 — No high-risk findings
• 1 — High or Critical findings detected

Language Support

• Python (.py)
• JavaScript (.js, .jsx)
• TypeScript (.ts, .tsx)

License

MIT