agentgg create reads a past vulnerability report and distills it into a new agent file, so a later scan catches the same anti-pattern again in this codebase.
The three arguments
All three are required.What —report reads
A
# at the start of a line marks a comment. agentgg create distills one report per session, in order, and prints a line for each.
What it emits
For each report, the command writes one file,<slug>-<hash>.md, into --output. The hash comes from the code path, the report path, and the report content. A re-run on the same inputs overwrites that same file and does not add a duplicate.
Before it writes, the command parses the generated file with the same loader agentgg scan uses. A file that fails to parse never lands on disk.
The generated file carries the standard frontmatter fields: slug, name, description, noiseTier, references, an optional precondition, and where. See Agent anatomy for what each field means, and Targeting for precondition and where.
Install the result
where and add false-positive notes to the prompt body first.