Entry point: axguard. Run axguard help for the workflow table and axguard version for 0.2.0.
Not shipped as CLI commands: axguard preship and axguard diff. Do not document or script those. Use skill axguard-preship / GitHub bot modes for pre-ship, and see Security Diff for experimental diff surfaces.

​
Core workflow

Useful flags on scan and audit only:
  • --fail-on {critical,high,medium,low,none} — exit 1 at or above threshold
  • --rules DIR — custom rule pack
  • --no-banner / --no-engage — quiet output for CI
  • --format {text,json,md,html} with -o FILE — scan only (audit always writes all three report formats)

​
Diagnostics

These explain findings. They are not vulnerability gates and exit 0. axguard paths also accepts display filters (--mode, --current, --blocked, --unknown, --critical, --shortest) and experimental hooks (--predictive, --diff, --what-if). See Attack paths and Security Diff.

​
Deeper analysis

​
Data, privacy, contribute

​
Ops and integrations

​
Slash commands

The agent plugin maps slash commands (for example /axguard-audit, /axguard-scan, /axguard-surface) onto the CLI. Class-focused commands (/axguard-sql, /axguard-xss, …) guide triage for a vulnerability class. See Agent skill and AI agents.