Skip to content
Agentic Suite

Command line

The command line is the fastest way to run a one-off review and to control the safety switches. Run it from the backend project with uv.

Run a review

Review a local repository and print the report:

Terminal window
uv run python -m app.cli.security_review scan --repo /path/to/repo

Review a diff:

Terminal window
uv run python -m app.cli.security_review scan --repo /path/to/repo --base origin/main

Review a GitHub pull request and store it under an organization:

Terminal window
uv run python -m app.cli.security_review scan --pr your-org/your-repo --number 42 --org <org-uuid>

Notes:

  • Without --org, the review runs ephemerally: it prints the report and writes local Markdown and JSON files, but does not store to the database.
  • With --org, the review is stored in the history for that organization.
  • Add --surfaces auth,injection to limit which finders run.
  • Reviews are dry-run by default. Add --execute only when you want the report marked as executed.
  • Add --force to review a commit that was already reviewed.

Install the agent and a starter config

Terminal window
uv run python -m app.cli.security_review install --org <org-uuid>

This seeds the Security Reviewer agent for the organization and writes a disabled starter config you can fill in.

Control the kill-switch

Terminal window
uv run python -m app.cli.security_review pause    # force dry-run everywhere
uv run python -m app.cli.security_review resume   # clear the kill-switch
uv run python -m app.cli.security_review status   # show config and safety state

Where reports are written

Local report files are written under ~/.agentic_suite/security-reviews by default. Override the directory with SECURITY_REVIEW_REPORT_DIR.