Security Scanning

Running native ecosystem audit tools without external telemetry.

$athena security

Native Audit Dispatch

Run:

bash

athena security

Athena automatically detects your ecosystem and executes the corresponding native audit tool:

Node.js: npm audit or pnpm audit
Python: pip-audit
Go: govulncheck
Rust: cargo audit
PHP: composer audit

Athena saves results to .athena/security-scan.json. They are added to security.md on the next athena sync. A tool that isn't installed is reported as unknown, never as 'no problems'.

Flags: --fail-on <critical|high|moderate|low> exits with code 1 at or above that severity, --no-audit reports secrets only, --last shows the previous scan.

← PreviousUsing the MCP Server Next →Reviewing a Git Diff