Quality, Security & Intelligence
for AI Coding Agents

Bastion is an all-in-one skill pack for Claude Code that delivers security scanning, quality gates, architecture review, and deep code intelligence — with zero dependencies.

$ claude > /plugin install bastion
17
Skills
6
Agents
0
Dependencies
5
Platforms
MIT
License

Three Pillars of Code Defense

Bastion delivers comprehensive protection and intelligence across security, code quality, and developer experience.

Security & Quality

Automated security scanning and quality enforcement that runs alongside your AI coding agent, catching vulnerabilities before they ship.

  • OWASP Top 10 vulnerability scanning
  • Quality gates with configurable thresholds
  • Automated test generation
  • Auto-remediation suggestions
  • SAST and secrets detection

Code Intelligence

Deep architectural insights and performance analysis that helps your AI agent understand and improve your entire codebase.

  • Architecture review and scoring
  • Performance bottleneck analysis
  • API contract validation
  • Dead code detection
  • Dependency vulnerability audit

Ecosystem

Workspace management and optimization tools that keep your Claude Code environment clean, efficient, and conflict-free.

  • Skill conflict detection
  • Token budget optimization
  • Session resume and state management
  • Workspace cleanup utilities
  • Cross-session memory integration

Three Steps to Secure Code

Get started in under a minute. Bastion integrates directly into your Claude Code workflow.

1

Install

Run a single command to install Bastion. No configuration files, no setup wizards, no external dependencies required.

2

Auto-activate

Bastion's skills automatically activate based on your context. Security checks run during code changes; quality gates trigger on commits.

3

Ship Quality Code

Deploy with confidence knowing your code has been scanned, reviewed, and validated by Bastion's comprehensive intelligence pipeline.

Up and Running in Seconds

Install Bastion and start using its powerful skills immediately with these commands.

Terminal
# Install Bastion plugin for Claude Code
/plugin install bastion

# Verify installation
/plugin list

# Bastion skills are now active
# Start coding — security & quality run automatically
01
Run a security scan /security scan --target ./src --mode full
02
Check code quality /quality gate --threshold B --fix
03
Review architecture /arch review --scope full --output report.md

Why Bastion

See how Bastion stacks up against working without skills or using generic skill packs.

Feature Bastion No Skills Generic Packs
OWASP Security Scanning Partial
Automated Quality Gates Partial
Architecture Review
Zero External Dependencies
Skill Conflict Detection
Token Budget Optimization
Auto-Remediation Partial
Dead Code Detection
Session Resume
CI/CD Pipeline Generation Partial
API Contract Checking
Specialized Agents 6 agents 1-2

Works Everywhere You Code

Bastion integrates seamlessly with every major AI coding platform.

Claude Code

Primary platform with full feature parity. Automatic session-start hook injection, all 17 skills, 6 agents, and 5 slash commands.

Cursor

Full plugin manifest support with custom hooks configuration. All skills and agents available through the Cursor plugin system.

Codex (OpenAI)

Comprehensive instructions file with all 15 public skills. Seamless integration with OpenAI's Codex CLI environment.

Gemini CLI

Extension manifest with dedicated GEMINI.md configuration. Full skill discovery and priority system support.

OpenCode

Instructions-based integration for the OpenCode platform. All 15 public skills with consistent behavior across platforms.

17 Skills & 6 Agents

Every tool an AI coding agent needs to ship secure, high-quality code.

Security & Quality

• security-scanner • test-forge • quality-gates • auto-remediation • cicd-generator • security-report

Code Intelligence

• code-archaeologist • architecture-reviewer • performance-hunter • api-contract-checker • test-coverage-analyst

Ecosystem Management

• skill-doctor • token-optimizer • session-resume • cleanup-agent • quality-grader

Specialized Agents

• security-auditor • test-generator • code-reviewer • remediation-agent • cicd-architect • perf-analyzer