agentgg recon previews a scan. agentgg status and agentgg view read a finished one. None of the three re-runs detection.
Preview with recon
agentgg recon <path> runs only the recon survey and the precondition plan. No agent reads a file for findings.
state/recon.json and state/plan.json under --output, and prints which agents it would queue and why. A later agentgg scan against the same --output directory reuses this brief and plan instead of a second pass.
Read the status
agentgg status [output-dir] reads a scan’s --output directory and prints file counts, finding counts, duplicates, verdicts, and recent runs. It defaults to ./scan-results.
Stage: validate (12/40). The stages are recon, detect, dedupe, validate, live, score, fix, and report.
Pass --json for machine-readable output, for example to pipe into another tool. The duplicate count is findings.duplicates. Each entry in recentRuns has a stage and a progress object with done and total.
Browse the findings
agentgg view [output-dir] [port] starts a local web UI for one --output directory and opens it in your browser. The default port is 3737. Press Ctrl+C to stop it.
Copy GHSA copies the finding as a GitHub Security Advisory (GHSA) style block, with the suggested fix.
A busy port moves to the next free one. Pass a port explicitly to pick one yourself.
Boot the viewer right after a scan
Pass--serve to agentgg scan to start the same viewer as soon as the scan finishes, with no second command.
--serve alone uses port 3737. --serve 8080 picks the port.
Full flag list: Scan flags.