bash-ast

What problem does it solve?

Bash AST parsing layer analyzes shell commands by converting them into an AST to identify dangerous patterns, helping teams enforce safe execution and prevent unsafe actions or injections.

Core Features & Use Cases

• Lexical analysis of Bash input into tokens
• Recursive-descent AST parsing to build command trees
• Dangerous command detection (rm, dd, chmod, curl|wget+pipe to shell)
• Path traversal detection and screening of sensitive paths
• Injection-chain and dangerous redirection detection
• Produces structured reports with threat level and justification for downstream tooling

Quick Start

Run python3 scripts/bash_ast.py '<command>' to analyze the command safety and generate a structured result.