apiiro-guardian（阿皮罗守护者）

Apiiro Guardian

Ask security questions and get AI-powered analysis about your repository.

Query

Auto-detects the current git repository for context (like risks does). No need to specify a repo explicitly — Guardian picks it up from the git remote.

Important: Before running a query, consider whether the question is repo-specific or org-wide:

• Repo-specific (default): questions about the current repo's code, risks, auth flows, dependencies, etc.
• Org-wide (--global): questions about the org's policies, top risks across all repos, general security posture, or anything not tied to a specific codebase.

If the question is clearly about the org as a whole (e.g. "top risks last week", "what are our policies"), use --global. If it's unclear, ask the user: *"Should I scope this to the current repo, or across your whole org?"*

apiiro guardian query "what risks exist in this repo"
apiiro guardian query "deep analysis of auth flow" --model normal
apiiro guardian query "what is STRIDE?" --global          # General security question
apiiro guardian query "top risks across the org last week" --global
apiiro guardian query "what are our org security policies?" --global
apiiro guardian query "detailed analysis" --timeout 120   # 120s timeout
apiiro guardian query "risk analysis" -f analysis.md

Options: --model <fast|normal> (default: fast), -g, --global, --timeout <seconds> (default: 60), -f, --file <path>.

In TTY mode, responses stream with markdown rendering.

Repository Management

apiiro guardian repository detect          # Detect and verify repo in Apiiro
apiiro guardian repository clear           # Clear cached repo info
apiiro guardian repository clear --global  # Clear all cached repos

Detection results are cached for 24 hours.

Global Options

-o, --output <json|text>, -f, --file <path>, --no-color.