safe-chains 0.123.1

# Supported Commands

Auto-generated by `safe-chains --list-commands`. These commands, subcommands, and flags are safe to run individually or in combination.

## Glossary

| Term | Meaning |
|------|---------|
| **Allowed standalone flags** | Flags that take no value (`--verbose`, `-v`). Listed on flat commands. |
| **Flags** | Same as standalone flags, but in the shorter format used within subcommand entries. |
| **Allowed valued flags** | Flags that require a value (`--output file`, `-j 4`). |
| **Valued** | Same as valued flags, in shorter format within subcommand entries. |
| **Bare invocation allowed** | The command can be run with no arguments at all. |
| **Subcommands** | Named subcommands that are allowed (e.g. `git log`, `cargo test`). |
| **Positional arguments only** | No specific flags are listed; only positional arguments are accepted. |
| **(requires --flag)** | A guarded subcommand that is only allowed when a specific flag is present (e.g. `cargo fmt` requires `--check`). |

Unlisted flags, subcommands, and commands are not allowed.

### `aapt2` (https://developer.android.com/tools/aapt2)

- **dump badging**: Flags: --help, --no-values, -h, -v. Valued: --config, --file
- **dump configurations**: Flags: --help, --no-values, -h, -v. Valued: --config, --file
- **dump permissions**: Flags: --help, --no-values, -h, -v. Valued: --config, --file
- **dump resources**: Flags: --help, --no-values, -h, -v. Valued: --config, --file
- **dump strings**: Flags: --help, --no-values, -h, -v. Valued: --config, --file
- **dump styleparents**: Flags: --help, --no-values, -h, -v. Valued: --config, --file
- **dump xmlstrings**: Flags: --help, --no-values, -h, -v. Valued: --config, --file
- **dump xmltree**: Flags: --help, --no-values, -h, -v. Valued: --config, --file
- **version**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -V, -h

### `ack` (https://beyondgrep.com/documentation/)

- Allowed standalone flags: --color, --column, --count, --files-with-matches, --files-without-matches, --flush, --follow, --group, --heading, --help, --ignore-case, --invert-match, --line, --literal, --match, --no-color, --no-filename, --no-follow, --no-group, --no-heading, --nocolor, --noenv, --nofilter, --nofollow, --nogroup, --noheading, --nopager, --nosmart-case, --passthru, --print0, --show-types, --smart-case, --sort-files, --version, --with-filename, --word-regexp, -1, -H, -L, -V, -c, -f, -h, -i, -l, -n, -s, -v, -w, -x
- Allowed valued flags: --after-context, --before-context, --context, --ignore-dir, --max-count, --noignore-dir, --output, --pager, --type, --type-add, --type-del, --type-set, -A, -B, -C, -m

### `act` (https://nektosact.com/)

- Requires --dryrun, --graph, --list, -l, -n. - Allowed standalone flags: --dryrun, --graph, --help, --list, --version, -h, -l, -n
- Allowed valued flags: --action-offline-mode, --artifact-server-path, --container-architecture, --env, --env-file, --eventpath, --input, --job, --matrix, --platform, --pull, --remote-name, --secret, --secret-file, --var, --var-file, --workflows, -E, -P, -W, -e, -j, -s

### `adb` (https://developer.android.com/tools/adb)

- Bare subcommands: devices, get-serialno, get-state, help, start-server, version. forward --list, reverse --list. logcat (requires -d). shell: cat, df, dumpsys, getprop, id, ls, pm list/path, ps, settings get, uname, whoami, wm size/density. Prefix flag -s SERIAL is skipped.

### `ag` (https://github.com/ggreer/the_silver_searcher)

- Allowed standalone flags: --ackmate, --all-text, --all-types, --case-sensitive, --color, --column, --count, --filename, --files-with-matches, --files-without-matches, --fixed-strings, --follow, --group, --heading, --help, --hidden, --ignore-case, --invert-match, --line-numbers, --literal, --no-break, --no-color, --no-filename, --no-follow, --no-group, --no-heading, --no-numbers, --nobreak, --nocolor, --nofilename, --nofollow, --nogroup, --noheading, --nonumbers, --null, --numbers, --one-device, --only-matching, --print-all-files, --print-long-lines, --search-binary, --search-files, --search-zip, --silent, --smart-case, --stats, --unrestricted, --version, --vimgrep, --word-regexp, -0, -H, -L, -Q, -S, -U, -V, -a, -c, -f, -h, -i, -l, -n, -s, -u, -v, -w
- Allowed valued flags: --after, --before, --context, --depth, --file-search-regex, --ignore, --max-count, --pager, --path-to-ignore, --workers, -A, -B, -C, -G, -g, -m

### `agvtool` (https://developer.apple.com/library/archive/qa/qa1827/_index.html)

- **mvers**: Flags: --help, -h
- **vers**: Flags: --help, -h
- **what-marketing-version**: Flags: --help, -h
- **what-version**: Flags: --help, -h

### `aider` (https://aider.chat/docs/)

- Allowed standalone flags: --check-update, --help, --just-check-update, --list-models, --models, --show-prompts, --show-release-notes, --show-repo-map, --version, -V, -h

### `alias` (https://man7.org/linux/man-pages/man1/alias.1p.html)

- Allowed standalone flags: -p
- Bare invocation allowed
- Hyphen-prefixed positional arguments accepted

### `ansible-config` (https://docs.ansible.com/ansible/latest/cli/ansible-config.html)

- **dump**: Flags: --help, --only-changed, -h
- **list**: Flags: --help, -h
- **view**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -h

### `ansible-doc` (https://docs.ansible.com/ansible/latest/cli/ansible-doc.html)

- Allowed standalone flags: --help, --json, --list, --metadata-dump, --version, -F, -h, -j, -l
- Allowed valued flags: --module-path, --type, -M, -t
- Bare invocation allowed

### `ansible-galaxy` (https://docs.ansible.com/ansible/latest/cli/ansible-galaxy.html)

- **info**: Flags: --help, -h
- **list**: Flags: --help, -h
- **search**: Flags: --help, -h. Valued: --author, --galaxy-tags, --platforms
- Allowed standalone flags: --help, --version, -h

### `ansible-inventory` (https://docs.ansible.com/ansible/latest/cli/ansible-inventory.html)

- **--graph**: Flags: --help, --vars, -h. Valued: --inventory, --limit, -i, -l
- **--host**: Flags: --help, -h. Valued: --inventory, -i
- **--list**: Flags: --help, --yaml, --toml, --export, -h, -y. Valued: --inventory, --limit, -i, -l
- Allowed standalone flags: --help, --version, -h

### `ansible-playbook` (https://docs.ansible.com/ansible/latest/cli/ansible-playbook.html)

- Requires --list-hosts, --list-tasks, --list-tags, --syntax-check. - Allowed standalone flags: --help, --list-hosts, --list-tags, --list-tasks, --syntax-check, --version, -h
- Allowed valued flags: --connection, --extra-vars, --inventory, --limit, --tags, --skip-tags, -C, -c, -e, -i, -l, -t

### `apkanalyzer` (https://developer.android.com/tools/apkanalyzer)

- **apk compare**: Flags: --help, -h
- **apk download-size**: Flags: --help, -h
- **apk features**: Flags: --help, --not-required, -h
- **apk file-size**: Flags: --help, -h
- **apk summary**: Flags: --help, -h
- **dex code**: Flags: --help, -h
- **dex list**: Flags: --help, -h
- **dex packages**: Flags: --defined-only, --help, -h. Valued: --files, --proguard-folder, --proguard-mappings, --proguard-seeds, --proguard-usages
- **dex references**: Flags: --help, -h
- **files cat**: Flags: --help, -h
- **files list**: Flags: --help, -h
- **manifest application-id**: Flags: --help, -h
- **manifest debuggable**: Flags: --help, -h
- **manifest min-sdk**: Flags: --help, -h
- **manifest permissions**: Flags: --help, -h
- **manifest print**: Flags: --help, -h
- **manifest target-sdk**: Flags: --help, -h
- **manifest version-code**: Flags: --help, -h
- **manifest version-name**: Flags: --help, -h
- **resources configs**: Flags: --help, -h. Valued: --config, --name, --type
- **resources names**: Flags: --help, -h. Valued: --config, --name, --type
- **resources value**: Flags: --help, -h. Valued: --config, --name, --type
- **resources xml**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -V, -h

### `apksigner` (https://developer.android.com/tools/apksigner)

- **help**: Flags: --help, -h
- **verify**: Flags: --help, --print-certs, --verbose, -h, -v. Valued: --in, --max-sdk-version, --min-sdk-version
- **version**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -V, -h

### `arch` (https://www.gnu.org/software/coreutils/manual/coreutils.html#arch-invocation)

- Allowed standalone flags: --help, --version, -V, -h
- Bare invocation allowed

### `asdf` (https://asdf-vm.com/manage/commands.html)

- **current**: Flags: --help, -h
- **help**: Flags: --help, -h
- **info**: Flags: --help, -h
- **list**: Flags: --help, -h
- **plugin list**: Flags: --help, -h
- **plugin-list**: Flags: --help, -h
- **plugin-list-all**: Flags: --help, -h
- **version**: Flags: --help, -h
- **which**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -V, -h

### `avdmanager` (https://developer.android.com/tools/avdmanager)

- **list avd**: Flags: --compact, --help, -c, -h
- **list device**: Flags: --compact, --help, -c, -h
- **list target**: Flags: --compact, --help, -c, -h
- Allowed standalone flags: --help, --version, -V, -h

### `awk / gawk / mawk / nawk` (https://www.gnu.org/software/gawk/manual/gawk.html)

- Program validated: system, getline, |, > constructs checked
- Allowed standalone flags: --characters-as-bytes, --copyright, --gen-pot, --lint, --no-optimize, --optimize, --posix, --re-interval, --sandbox, --traditional, --use-lc-numeric, --version, -C, -N, -O, -P, -S, -V, -b, -c, -g, -r, -s, -t
- Allowed valued flags: --assign, --field-separator, -F, -v

### `aws` (https://docs.aws.amazon.com/cli/latest/)

- **accessanalyzer**: Allowed arguments: describe-*, get-*, list-*
- **account**: Allowed arguments: describe-*, get-*, list-*
- **acm**: Allowed arguments: describe-*, get-*, list-*
- **acm-pca**: Allowed arguments: describe-*, get-*, list-*
- **amp**: Allowed arguments: describe-*, get-*, list-*
- **amplify**: Allowed arguments: describe-*, get-*, list-*
- **amplifybackend**: Allowed arguments: describe-*, get-*, list-*
- **amplifyuibuilder**: Allowed arguments: describe-*, get-*, list-*
- **apigateway**: Allowed arguments: get-*
- **apigatewayv2**: Allowed arguments: get-*
- **appconfig**: Allowed arguments: describe-*, get-*, list-*
- **appflow**: Allowed arguments: describe-*, get-*, list-*
- **application-autoscaling**: Allowed arguments: describe-*, get-*, list-*
- **application-insights**: Allowed arguments: describe-*, get-*, list-*
- **appmesh**: Allowed arguments: describe-*, get-*, list-*
- **apprunner**: Allowed arguments: describe-*, get-*, list-*
- **appstream**: Allowed arguments: describe-*, get-*, list-*
- **appsync**: Allowed arguments: describe-*, get-*, list-*
- **artifact**: Allowed arguments: describe-*, get-*, list-*
- **athena**: Allowed arguments: get-*, list-*
- **auditmanager**: Allowed arguments: describe-*, get-*, list-*
- **autoscaling**: Allowed arguments: describe-*
- **autoscaling-plans**: Allowed arguments: describe-*, get-*, list-*
- **b2bi**: Allowed arguments: describe-*, get-*, list-*
- **backup**: Allowed arguments: describe-*, get-*, list-*
- **batch**: Allowed arguments: describe-*, get-*, list-*
- **bedrock**: Allowed arguments: describe-*, get-*, list-*
- **bedrock-agent**: Allowed arguments: describe-*, get-*, list-*
- **billingconductor**: Allowed arguments: describe-*, get-*, list-*
- **braket**: Allowed arguments: describe-*, get-*, list-*
- **budgets**: Allowed arguments: describe-*, get-*, list-*
- **ce**: Allowed arguments: describe-*, get-*, list-*
- **chatbot**: Allowed arguments: describe-*, get-*, list-*
- **chime**: Allowed arguments: describe-*, get-*, list-*
- **chime-sdk-identity**: Allowed arguments: describe-*, get-*, list-*
- **chime-sdk-meetings**: Allowed arguments: describe-*, get-*, list-*
- **chime-sdk-messaging**: Allowed arguments: describe-*, get-*, list-*
- **chime-sdk-voice**: Allowed arguments: describe-*, get-*, list-*
- **cleanrooms**: Allowed arguments: describe-*, get-*, list-*
- **cloud9**: Allowed arguments: describe-*, get-*, list-*
- **cloudcontrol**: Allowed arguments: describe-*, get-*, list-*
- **cloudformation**: Allowed arguments: describe-*, get-*, list-*
- **cloudfront**: Allowed arguments: describe-*, get-*, list-*
- **cloudhsmv2**: Allowed arguments: describe-*, get-*, list-*
- **cloudsearch**: Allowed arguments: describe-*, get-*, list-*
- **cloudtrail**: Allowed arguments: describe-*, get-*, list-*
- **cloudwatch**: Allowed arguments: describe-*, get-*, list-*
- **codeartifact**: Allowed arguments: describe-*, get-*, list-*
- **codebuild**: Allowed arguments: batch-get-*, describe-*, list-*
- **codecatalyst**: Allowed arguments: describe-*, get-*, list-*
- **codecommit**: Allowed arguments: describe-*, get-*, list-*
- **codeguru-reviewer**: Allowed arguments: describe-*, get-*, list-*
- **codeguruprofiler**: Allowed arguments: describe-*, get-*, list-*
- **codepipeline**: Allowed arguments: get-*, list-*
- **codestar-connections**: Allowed arguments: describe-*, get-*, list-*
- **codestar-notifications**: Allowed arguments: describe-*, get-*, list-*
- **cognito-identity**: Allowed arguments: describe-*, get-*, list-*
- **cognito-idp**: Allowed arguments: describe-*, get-*, list-*
- **comprehend**: Allowed arguments: describe-*, get-*, list-*
- **compute-optimizer**: Allowed arguments: describe-*, get-*, list-*
- **configservice**: Allowed arguments: describe-*, get-*, list-*
- **configure get**: Flags: --help
- **configure list**: Flags: --help
- **connect**: Allowed arguments: describe-*, get-*, list-*
- **controltower**: Allowed arguments: describe-*, get-*, list-*
- **cur**: Allowed arguments: describe-*, get-*, list-*
- **databrew**: Allowed arguments: describe-*, get-*, list-*
- **dataexchange**: Allowed arguments: describe-*, get-*, list-*
- **datasync**: Allowed arguments: describe-*, get-*, list-*
- **datazone**: Allowed arguments: describe-*, get-*, list-*
- **dax**: Allowed arguments: describe-*, get-*, list-*
- **deadline**: Allowed arguments: describe-*, get-*, list-*
- **detective**: Allowed arguments: describe-*, get-*, list-*
- **devicefarm**: Allowed arguments: describe-*, get-*, list-*
- **devops-guru**: Allowed arguments: describe-*, get-*, list-*
- **directconnect**: Allowed arguments: describe-*, get-*, list-*
- **discovery**: Allowed arguments: describe-*, get-*, list-*
- **dlm**: Allowed arguments: describe-*, get-*, list-*
- **dms**: Allowed arguments: describe-*, get-*, list-*
- **docdb**: Allowed arguments: describe-*, get-*, list-*
- **docdb-elastic**: Allowed arguments: describe-*, get-*, list-*
- **ds**: Allowed arguments: describe-*, get-*, list-*
- **dynamodb**: Allowed arguments: describe-*, list-*
- **dynamodbstreams**: Allowed arguments: describe-*, get-*, list-*
- **ebs**: Allowed arguments: describe-*, get-*, list-*
- **ec2**: Allowed arguments: describe-*
- **ecr**: Allowed arguments: batch-get-*, describe-*, get-*, list-*
- **ecr-public**: Allowed arguments: describe-*, get-*, list-*
- **ecs**: Allowed arguments: describe-*, list-*
- **efs**: Allowed arguments: describe-*, get-*, list-*
- **eks**: Allowed arguments: describe-*, list-*
- **elasticache**: Allowed arguments: describe-*, list-*
- **elasticbeanstalk**: Allowed arguments: describe-*, list-*
- **elastictranscoder**: Allowed arguments: describe-*, get-*, list-*
- **elb**: Allowed arguments: describe-*
- **elbv2**: Allowed arguments: describe-*
- **emr**: Allowed arguments: describe-*, get-*, list-*
- **emr-containers**: Allowed arguments: describe-*, get-*, list-*
- **emr-serverless**: Allowed arguments: describe-*, get-*, list-*
- **entityresolution**: Allowed arguments: describe-*, get-*, list-*
- **es**: Allowed arguments: describe-*, get-*, list-*
- **events**: Allowed arguments: describe-*, list-*
- **finspace**: Allowed arguments: describe-*, get-*, list-*
- **firehose**: Allowed arguments: describe-*, get-*, list-*
- **fis**: Allowed arguments: describe-*, get-*, list-*
- **fms**: Allowed arguments: describe-*, get-*, list-*
- **forecast**: Allowed arguments: describe-*, get-*, list-*
- **frauddetector**: Allowed arguments: describe-*, get-*, list-*
- **fsx**: Allowed arguments: describe-*, get-*, list-*
- **gamelift**: Allowed arguments: describe-*, get-*, list-*
- **glacier**: Allowed arguments: describe-*, get-*, list-*
- **globalaccelerator**: Allowed arguments: describe-*, get-*, list-*
- **glue**: Allowed arguments: get-*, list-*
- **grafana**: Allowed arguments: describe-*, get-*, list-*
- **greengrass**: Allowed arguments: describe-*, get-*, list-*
- **greengrassv2**: Allowed arguments: describe-*, get-*, list-*
- **groundstation**: Allowed arguments: describe-*, get-*, list-*
- **guardduty**: Allowed arguments: describe-*, get-*, list-*
- **health**: Allowed arguments: describe-*, get-*, list-*
- **healthlake**: Allowed arguments: describe-*, get-*, list-*
- **iam**: Allowed arguments: get-*, list-*
- **identitystore**: Allowed arguments: describe-*, get-*, list-*
- **imagebuilder**: Allowed arguments: describe-*, get-*, list-*
- **inspector2**: Allowed arguments: describe-*, get-*, list-*
- **internetmonitor**: Allowed arguments: describe-*, get-*, list-*
- **iot**: Allowed arguments: describe-*, get-*, list-*
- **iotevents**: Allowed arguments: describe-*, get-*, list-*
- **iotsitewise**: Allowed arguments: describe-*, get-*, list-*
- **iottwinmaker**: Allowed arguments: describe-*, get-*, list-*
- **ivs**: Allowed arguments: describe-*, get-*, list-*
- **kafka**: Allowed arguments: describe-*, get-*, list-*
- **kafkaconnect**: Allowed arguments: describe-*, get-*, list-*
- **kendra**: Allowed arguments: describe-*, get-*, list-*
- **keyspaces**: Allowed arguments: describe-*, get-*, list-*
- **kinesis**: Allowed arguments: describe-*, get-*, list-*
- **kinesisanalytics**: Allowed arguments: describe-*, get-*, list-*
- **kinesisanalyticsv2**: Allowed arguments: describe-*, get-*, list-*
- **kinesisvideo**: Allowed arguments: describe-*, get-*, list-*
- **kms**: Allowed arguments: describe-*, get-*, list-*
- **lakeformation**: Allowed arguments: describe-*, get-*, list-*
- **lambda**: Allowed arguments: get-*, list-*
- **lex-models**: Allowed arguments: describe-*, get-*, list-*
- **lexv2-models**: Allowed arguments: describe-*, get-*, list-*
- **license-manager**: Allowed arguments: describe-*, get-*, list-*
- **lightsail**: Allowed arguments: describe-*, get-*, list-*
- **location**: Allowed arguments: describe-*, get-*, list-*
- **logs**: Allowed arguments: describe-*, filter-*, get-*, list-*
- **m2**: Allowed arguments: describe-*, get-*, list-*
- **macie2**: Allowed arguments: describe-*, get-*, list-*
- **managedblockchain**: Allowed arguments: describe-*, get-*, list-*
- **mediaconnect**: Allowed arguments: describe-*, get-*, list-*
- **mediaconvert**: Allowed arguments: describe-*, get-*, list-*
- **medialive**: Allowed arguments: describe-*, get-*, list-*
- **mediapackage**: Allowed arguments: describe-*, get-*, list-*
- **mediastore**: Allowed arguments: describe-*, get-*, list-*
- **mediatailor**: Allowed arguments: describe-*, get-*, list-*
- **medical-imaging**: Allowed arguments: describe-*, get-*, list-*
- **memorydb**: Allowed arguments: describe-*, get-*, list-*
- **mgn**: Allowed arguments: describe-*, get-*, list-*
- **mq**: Allowed arguments: describe-*, get-*, list-*
- **mturk**: Allowed arguments: describe-*, get-*, list-*
- **mwaa**: Allowed arguments: describe-*, get-*, list-*
- **neptune**: Allowed arguments: describe-*, get-*, list-*
- **neptune-graph**: Allowed arguments: describe-*, get-*, list-*
- **network-firewall**: Allowed arguments: describe-*, get-*, list-*
- **networkmanager**: Allowed arguments: describe-*, get-*, list-*
- **notifications**: Allowed arguments: describe-*, get-*, list-*
- **oam**: Allowed arguments: describe-*, get-*, list-*
- **omics**: Allowed arguments: describe-*, get-*, list-*
- **opensearch**: Allowed arguments: describe-*, get-*, list-*
- **opensearchserverless**: Allowed arguments: describe-*, get-*, list-*
- **organizations**: Allowed arguments: describe-*, get-*, list-*
- **outposts**: Allowed arguments: describe-*, get-*, list-*
- **personalize**: Allowed arguments: describe-*, get-*, list-*
- **pi**: Allowed arguments: describe-*, get-*, list-*
- **pinpoint**: Allowed arguments: describe-*, get-*, list-*
- **pipes**: Allowed arguments: describe-*, get-*, list-*
- **polly**: Allowed arguments: describe-*, get-*, list-*
- **pricing**: Allowed arguments: describe-*, get-*, list-*
- **proton**: Allowed arguments: describe-*, get-*, list-*
- **quicksight**: Allowed arguments: describe-*, get-*, list-*
- **ram**: Allowed arguments: describe-*, get-*, list-*
- **rbin**: Allowed arguments: describe-*, get-*, list-*
- **rds**: Allowed arguments: describe-*, list-*
- **rds-data**: Allowed arguments: describe-*, get-*, list-*
- **redshift**: Allowed arguments: describe-*, get-*, list-*
- **redshift-data**: Allowed arguments: describe-*, get-*, list-*
- **redshift-serverless**: Allowed arguments: describe-*, get-*, list-*
- **rekognition**: Allowed arguments: describe-*, get-*, list-*
- **resiliencehub**: Allowed arguments: describe-*, get-*, list-*
- **resource-explorer-2**: Allowed arguments: describe-*, get-*, list-*
- **resource-groups**: Allowed arguments: describe-*, get-*, list-*
- **resourcegroupstaggingapi**: Allowed arguments: describe-*, get-*, list-*
- **rolesanywhere**: Allowed arguments: describe-*, get-*, list-*
- **route53**: Allowed arguments: get-*, list-*
- **route53-recovery-control-config**: Allowed arguments: describe-*, get-*, list-*
- **route53-recovery-readiness**: Allowed arguments: describe-*, get-*, list-*
- **route53domains**: Allowed arguments: describe-*, get-*, list-*
- **route53profiles**: Allowed arguments: describe-*, get-*, list-*
- **route53resolver**: Allowed arguments: describe-*, get-*, list-*
- **rum**: Allowed arguments: describe-*, get-*, list-*
- **s3**: Allowed arguments: ls
- **s3api**: Allowed arguments: get-*, head-*, list-*
- **s3control**: Allowed arguments: describe-*, get-*, list-*
- **sagemaker**: Allowed arguments: describe-*, list-*
- **savingsplans**: Allowed arguments: describe-*, get-*, list-*
- **scheduler**: Allowed arguments: describe-*, get-*, list-*
- **schemas**: Allowed arguments: describe-*, get-*, list-*
- **secretsmanager**: Allowed arguments: describe-*, get-*, list-*
- **securityhub**: Allowed arguments: describe-*, get-*, list-*
- **securitylake**: Allowed arguments: describe-*, get-*, list-*
- **serverlessrepo**: Allowed arguments: describe-*, get-*, list-*
- **service-quotas**: Allowed arguments: describe-*, get-*, list-*
- **servicecatalog**: Allowed arguments: describe-*, get-*, list-*
- **servicediscovery**: Allowed arguments: describe-*, get-*, list-*
- **ses**: Allowed arguments: get-*, list-*
- **sesv2**: Allowed arguments: get-*, list-*
- **shield**: Allowed arguments: describe-*, get-*, list-*
- **signer**: Allowed arguments: describe-*, get-*, list-*
- **sns**: Allowed arguments: get-*, list-*
- **sqs**: Allowed arguments: get-*, list-*
- **ssm**: Allowed arguments: describe-*, get-*, list-*
- **ssm-contacts**: Allowed arguments: describe-*, get-*, list-*
- **ssm-incidents**: Allowed arguments: describe-*, get-*, list-*
- **sso**: Allowed arguments: describe-*, get-*, list-*
- **sso-admin**: Allowed arguments: describe-*, get-*, list-*
- **stepfunctions**: Allowed arguments: describe-*, get-*, list-*
- **storagegateway**: Allowed arguments: describe-*, get-*, list-*
- **sts get-caller-identity**: Flags: --help
- **sts**: Allowed arguments: describe-*, get-*, list-*
- **support**: Allowed arguments: describe-*, get-*, list-*
- **swf**: Allowed arguments: describe-*, get-*, list-*
- **synthetics**: Allowed arguments: describe-*, get-*, list-*
- **textract**: Allowed arguments: describe-*, get-*, list-*
- **timestream-query**: Allowed arguments: describe-*, get-*, list-*
- **transcribe**: Allowed arguments: describe-*, get-*, list-*
- **transfer**: Allowed arguments: describe-*, get-*, list-*
- **translate**: Allowed arguments: describe-*, get-*, list-*
- **trustedadvisor**: Allowed arguments: describe-*, get-*, list-*
- **verifiedpermissions**: Allowed arguments: describe-*, get-*, list-*
- **vpc-lattice**: Allowed arguments: describe-*, get-*, list-*
- **waf**: Allowed arguments: describe-*, get-*, list-*
- **waf-regional**: Allowed arguments: describe-*, get-*, list-*
- **wafv2**: Allowed arguments: describe-*, get-*, list-*
- **wellarchitected**: Allowed arguments: describe-*, get-*, list-*
- **workdocs**: Allowed arguments: describe-*, get-*, list-*
- **workmail**: Allowed arguments: describe-*, get-*, list-*
- **workspaces**: Allowed arguments: describe-*, get-*, list-*
- **workspaces-web**: Allowed arguments: describe-*, get-*, list-*
- **xray**: Allowed arguments: describe-*, get-*, list-*
- Allowed standalone flags: --help, --version

### `az` (https://learn.microsoft.com/en-us/cli/azure/)

- **account**: Allowed arguments: list, show, list-locations
- **acr list**: Positional args accepted
- **acr repository**: Allowed arguments: list, show
- **acr show**: Positional args accepted
- **ad app**: Allowed arguments: list, show
- **ad group**: Allowed arguments: list, show
- **ad sp**: Allowed arguments: list, show
- **ad user**: Allowed arguments: list, show
- **advisor**: Allowed arguments: configuration, recommendation
- **aks**: Allowed arguments: list, show, get-credentials
- **appservice**: Allowed arguments: list-locations, plan
- **batch**: Allowed arguments: account, application, certificate, job, node, pool, task
- **cdn**: Allowed arguments: custom-domain, edge-node, endpoint, name-exists, origin, profile, waf-policy
- **cognitiveservices**: Allowed arguments: account, list, usage
- **consumption**: Allowed arguments: budget, marketplace, pricesheet, reservation, usage
- **container**: Allowed arguments: list, logs, show
- **containerapp**: Allowed arguments: list, show
- **cosmosdb**: Allowed arguments: list, show
- **deployment**: Allowed arguments: list, operation, show
- **disk**: Allowed arguments: list, show
- **dns**: Allowed arguments: record-set, zone
- **eventhubs**: Allowed arguments: eventhub, namespace
- **feature**: Allowed arguments: list, show
- **functionapp**: Allowed arguments: list, show
- **group**: Allowed arguments: list, show
- **hdinsight**: Allowed arguments: list, show
- **identity**: Allowed arguments: list, show
- **iot**: Allowed arguments: central, dps, hub
- **keyvault**: Allowed arguments: list, show
- **lock**: Allowed arguments: list, show
- **logicapp**: Allowed arguments: list, show
- **managed-cassandra**: Allowed arguments: cluster, datacenter
- **maps**: Allowed arguments: account
- **mariadb**: Allowed arguments: db, server
- **monitor log-analytics**: Allowed arguments: query
- **monitor metrics**: Allowed arguments: list
- **mysql**: Allowed arguments: db, flexible-server, server
- **netappfiles**: Allowed arguments: account, pool, snapshot, volume
- **network nic**: Allowed arguments: list, show
- **network nsg**: Allowed arguments: list, show
- **network public-ip**: Allowed arguments: list, show
- **network vnet**: Allowed arguments: list, show
- **notification-hub**: Allowed arguments: authorization-rule, credential, list, namespace
- **policy**: Allowed arguments: assignment, definition, set-definition, state
- **postgres**: Allowed arguments: db, flexible-server, server
- **provider**: Allowed arguments: list, operation, show
- **redis**: Allowed arguments: list, list-keys, show
- **relay**: Allowed arguments: hyco, namespace, wcfrelay
- **resource**: Allowed arguments: list, show
- **role**: Allowed arguments: assignment, definition
- **search**: Allowed arguments: admin-key, query-key, service
- **security**: Allowed arguments: alert, assessment, contact, pricing, secure-score, setting, task
- **servicebus**: Allowed arguments: namespace, queue, topic
- **sf**: Allowed arguments: application, cluster, managed-application-type, managed-cluster, service
- **sig**: Allowed arguments: image-definition, image-version, list, show
- **signalr**: Allowed arguments: list, show
- **spring**: Allowed arguments: app, certificate, config-server, eureka-server, service-registry
- **sql db**: Allowed arguments: list, show
- **sql server**: Allowed arguments: list, show
- **staticwebapp**: Allowed arguments: list, show
- **storage account**: Allowed arguments: list, show
- **synapse**: Allowed arguments: spark, sql, workspace
- **tag**: Allowed arguments: list
- **ts**: Allowed arguments: list, show
- **version**: Positional args accepted
- **vm**: Allowed arguments: list, show, list-sizes, list-ip-addresses
- **vmss**: Allowed arguments: list, list-instances, show
- **webapp**: Allowed arguments: list, show
- Allowed standalone flags: --help, -h, --version

### `b2sum` (https://www.gnu.org/software/coreutils/manual/coreutils.html#b2sum-invocation)

- Allowed standalone flags: --binary, --check, --help, --ignore-missing, --quiet, --status, --strict, --tag, --text, --version, --warn, --zero, -V, -b, -c, -h, -t, -w, -z
- Allowed valued flags: --length, -l
- Bare invocation allowed

### `bandit` (https://bandit.readthedocs.io/)

- Allowed standalone flags: --help, --ignore-nosec, --number, --one-line, --quiet, --recursive, --verbose, --version, -h, -i, -n, -q, -r, -v
- Allowed valued flags: --aggregate, --baseline, --config, --configfile, --exclude, --format, --output, --profile, --severity-level, --skip, --tests, -b, -c, -f, -l, -o, -p, -s, -t

### `base64` (https://www.gnu.org/software/coreutils/manual/coreutils.html#base64-invocation)

- Allowed standalone flags: --decode, --help, --ignore-garbage, --version, -D, -V, -d, -h, -i
- Allowed valued flags: --wrap, -b, -w
- Bare invocation allowed

### `basecamp` (https://github.com/basecamp/basecamp-cli)

- **auth token**: Positional args accepted
- **cards list**: Positional args accepted
- **commands**: Positional args accepted
- **doctor**: Positional args accepted
- **files list**: Positional args accepted
- **help**: Positional args accepted
- **projects list**: Positional args accepted
- **projects show**: Positional args accepted
- **search**: Positional args accepted
- **todos list**: Positional args accepted
- Allowed standalone flags: --help, --version, -h

### `basename` (https://www.gnu.org/software/coreutils/manual/coreutils.html#basename-invocation)

- Allowed standalone flags: --help, --multiple, --version, --zero, -V, -a, -h, -z
- Allowed valued flags: --suffix, -s

### `bash / sh` (https://www.gnu.org/software/bash/manual/bash.html)

- Allowed: --version, --help, `bash -c` / `sh -c` with a safe inner command.

### `bat` (https://github.com/sharkdp/bat#readme)

- Allowed standalone flags: --diff, --help, --list-languages, --list-themes, --no-config, --number, --plain, --show-all, --version, -A, -P, -V, -d, -h, -n, -p, -u
- Allowed valued flags: --color, --decorations, --diff-context, --file-name, --highlight-line, --italic-text, --language, --line-range, --map-syntax, --paging, --style, --tabs, --terminal-width, --theme, --wrap, -H, -l, -m, -r
- Bare invocation allowed

### `bazel` (https://bazel.build/reference/command-line-reference)

- **aquery**: Flags: --help, --keep_going, -h, -k. Valued: --output, --universe_scope
- **cquery**: Flags: --help, --keep_going, -h, -k. Valued: --output, --universe_scope
- **info**: Flags: --help, -h
- **query**: Flags: --help, --keep_going, --nohost_deps, --noimplicit_deps, --order_output, -h, -k. Valued: --output, --universe_scope
- **version**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -V, -h

### `bc` (https://www.gnu.org/software/bc/manual/html_mono/bc.html)

- Allowed standalone flags: --digit-clamp, --global-stacks, --help, --interactive, --mathlib, --no-digit-clamp, --no-line-length, --no-prompt, --no-read-prompt, --quiet, --standard, --version, --warn, -C, -P, -R, -V, -c, -g, -h, -i, -l, -q, -s, -w
- Allowed valued flags: --expression, --file, --ibase, --obase, --redefine, --scale, --seed, -E, -I, -O, -S, -e, -f, -r
- Bare invocation allowed

### `biome` (https://biomejs.dev/reference/cli/)

- **check**: Flags: --apply, --colors, --help, --json-formatter, --no-errors-on-unmatched, --quiet, --verbose, -h. Valued: --config-path, --max-diagnostics, --stdin-file-path, --vcs-root
- **ci**: Flags: --colors, --help, --json-formatter, --no-errors-on-unmatched, --quiet, --verbose, -h. Valued: --config-path, --max-diagnostics
- **format**: Flags: --colors, --help, --json-formatter, --no-errors-on-unmatched, --quiet, --verbose, -h. Valued: --config-path, --indent-style, --indent-width, --line-width, --stdin-file-path
- **lint**: Flags: --colors, --help, --json-formatter, --no-errors-on-unmatched, --quiet, --verbose, -h. Valued: --config-path, --max-diagnostics, --stdin-file-path, --vcs-root
- Allowed standalone flags: --help, --version, -V, -h

### `black` (https://black.readthedocs.io/en/stable/usage_and_configuration/the_basics.html)

- Requires --check, --diff. - Allowed standalone flags: --check, --diff, --color, --no-color, --fast, --quiet, --verbose, --help, --version
- Allowed valued flags: --config, --exclude, --extend-exclude, --include, --line-length, --target-version, -l, -t

### `branchdiff` (https://github.com/michaeldhopkins/branchdiff)

- Allowed standalone flags: --diff, --help, --no-auto-fetch, --print, --version, -V, -d, -h, -p
- Bare invocation allowed

### `brew` (https://docs.brew.sh/Manpage)

- **--prefix**: Flags: --help, -h, -q, -v
- **--repository**: Flags: --help, -h, -q, -v
- **abv**: Flags: --analytics, --cask, --formula, --help, --installed, --json, -h, -v. Valued: --days
- **bundle check**: Flags: --all, --help, --no-upgrade, --verbose, -h, -v. Valued: --file, --global
- **bundle list**: Flags: --all, --brews, --casks, --formula, --help, --taps, --verbose, --vscode, -h, -v. Valued: --file, --global
- **casks**: Flags: --help, -h, -q, -v
- **cat**: Flags: --help, -h, -q, -v
- **cleanup** (requires --dry-run): Flags: --dry-run, --help, --prune, --quiet, --verbose, -d, -h, -n, -q, -s, -v. Valued: --prune-prefix
- **config**: Flags: --help, -h, -q, -v
- **deps**: Flags: --1, --annotate, --cask, --direct, --for-each, --formula, --full-name, --graph, --help, --include-build, --include-optional, --include-test, --installed, --missing, --skip-recommended, --tree, --union, -h, -n
- **desc**: Flags: --cask, --description, --eval-all, --formula, --help, --name, --search, -d, -h, -n, -s
- **doctor**: Flags: --help, -h, -q, -v
- **formulae**: Flags: --help, -h, -q, -v
- **home**: Flags: --help, -h, -q, -v
- **info**: Flags: --analytics, --cask, --formula, --help, --installed, --json, -h, -v. Valued: --days
- **leaves**: Flags: --help, -h, -q, -v
- **list**: Flags: --cask, --formula, --full-name, --help, --multiple, --pinned, --versions, -1, -h, -l, -r, -t
- **log**: Flags: --cask, --formula, --help, --oneline, -1, -h. Valued: --max-count, -n
- **ls**: Flags: --cask, --formula, --full-name, --help, --multiple, --pinned, --versions, -1, -h, -l, -r, -t
- **outdated**: Flags: --cask, --fetch-HEAD, --formula, --greedy, --greedy-auto-updates, --greedy-latest, --help, --json, -d, -h, -q, -v
- **search**: Flags: --cask, --closed, --debian, --desc, --fedora, --fink, --formula, --help, --macports, --open, --opensuse, --pull-request, --repology, --ubuntu, -h
- **services info**: Flags: --all, --help, --json, -h
- **services list**: Flags: --help, --json, -h
- **shellenv**: Flags: --help, -h, -q, -v
- **tap**: Flags: --help, -h, -q, -v
- **tap-info**: Flags: --help, -h, -q, -v
- **upgrade** (requires --dry-run): Flags: --cask, --debug, --dry-run, --fetch-HEAD, --formula, --greedy, --greedy-auto-updates, --greedy-latest, --help, --quiet, --verbose, -d, -h, -n, -q, -v
- **uses**: Flags: --cask, --formula, --help, --include-build, --include-optional, --include-test, --installed, --missing, --recursive, --skip-recommended, -h
- Allowed standalone flags: --help, --version, -V, -h

### `bun` (https://bun.sh/docs/cli)

- **build**: Flags: --bytecode, --compile, --css-chunking, --emit-dce-annotations, --help, --minify, --minify-identifiers, --minify-syntax, --minify-whitespace, --no-bundle, --no-clear-screen, --production, --react-fast-refresh, --splitting, --watch, --windows-hide-console, -h. Valued: --asset-naming, --banner, --chunk-naming, --conditions, --entry-naming, --env, --external, --footer, --format, --outdir, --outfile, --packages, --public-path, --root, --sourcemap, --target, --windows-icon, -e
- **outdated**: Flags: --help, -h
- **pm bin**: Flags: --help, -h
- **pm cache**: Flags: --help, -h
- **pm hash**: Flags: --help, -h
- **pm ls**: Flags: --help, -h
- **test**: Flags: --bail, --help, --only, --rerun-each, --todo, -h. Valued: --preload, --timeout, -t
- Allowed standalone flags: --help, --version, -V, -h

### `bundle` (https://bundler.io/man/bundle.1.html)

- **check**: Flags: --dry-run, --help, -h. Valued: --gemfile, --path
- **info**: Flags: --help, --path, -h
- **install**: Flags: --help, -h
- **list**: Flags: --help, --name-only, --paths, -h
- **show**: Flags: --help, --paths, -h
- Allowed standalone flags: --help, --version, -V, -h

### `bundletool` (https://developer.android.com/tools/bundletool)

- **dump config**: Flags: --help, -h. Valued: --bundle, --module, --xpath
- **dump manifest**: Flags: --help, -h. Valued: --bundle, --module, --xpath
- **dump resources**: Flags: --help, -h. Valued: --bundle, --module, --xpath
- **get-size total**: Flags: --help, -h. Valued: --apks, --device-spec, --dimensions, --modules
- **validate**: Flags: --help, -h. Valued: --bundle
- **version**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -V, -h

### `bunx` (https://bun.sh/docs/cli/bunx)

- Delegates to the inner command's safety rules.
- Skips flags: --bun/--no-install/--package/-p.

### `cal` (https://man7.org/linux/man-pages/man1/cal.1.html)

- Allowed standalone flags: --help, --monday, --sunday, --three, --version, --year, -1, -3, -V, -h, -j, -m, -s, -w, -y
- Allowed valued flags: -A, -B, -d, -n
- Bare invocation allowed

### `cargo` (https://doc.rust-lang.org/cargo/commands/)

- **audit**: Flags: --deny, --help, --json, --no-fetch, --stale, -h, -n, -q, -v. Valued: --color, --db, --file, --ignore, --target-arch, --target-os, -f
- **bench**: Flags: --all-features, --all-targets, --benches, --bins, --doc, --examples, --frozen, --future-incompat-report, --help, --ignore-rust-version, --keep-going, --lib, --locked, --no-default-features, --no-fail-fast, --no-run, --offline, --release, --tests, --timings, --unit-graph, -h, -q, -v. Valued: --bench, --bin, --color, --config, --example, --features, --jobs, --manifest-path, --message-format, --package, --profile, --target, --target-dir, --test, -Z, -j, -p
- **bloat**: Flags: --crates, --filter, --help, --lib, --no-default-features, --release, --time, --wide, -h. Valued: --bin, --example, --features, --jobs, --manifest-path, --message-format, --package, --target, -j, -n, -p
- **build**: Flags: --all-features, --all-targets, --benches, --bins, --build-plan, --examples, --frozen, --future-incompat-report, --help, --ignore-rust-version, --keep-going, --lib, --locked, --no-default-features, --offline, --release, --tests, --timings, --unit-graph, -h, -q, -v. Valued: --bench, --bin, --color, --config, --example, --features, --jobs, --manifest-path, --message-format, --package, --profile, --target, --target-dir, --test, -Z, -j, -p
- **check**: Flags: --all-features, --all-targets, --benches, --bins, --examples, --frozen, --future-incompat-report, --help, --ignore-rust-version, --keep-going, --lib, --locked, --no-default-features, --offline, --release, --tests, --timings, --unit-graph, -h, -q, -v. Valued: --bench, --bin, --color, --config, --example, --features, --jobs, --manifest-path, --message-format, --package, --profile, --target, --target-dir, --test, -Z, -j, -p
- **clippy**: Flags: --all-features, --all-targets, --benches, --bins, --examples, --frozen, --future-incompat-report, --help, --ignore-rust-version, --keep-going, --lib, --locked, --no-default-features, --no-deps, --offline, --release, --tests, --timings, --unit-graph, -h, -q, -v. Valued: --bench, --bin, --color, --config, --example, --features, --jobs, --manifest-path, --message-format, --package, --profile, --target, --target-dir, --test, -Z, -j, -p
- **deny**: Flags: --all-features, --help, --no-default-features, -h, -q, -v. Valued: --color, --config, --exclude, --features, --format, --manifest-path, --target, --workspace
- **doc**: Flags: --all-features, --bins, --document-private-items, --examples, --frozen, --future-incompat-report, --help, --ignore-rust-version, --keep-going, --locked, --no-default-features, --no-deps, --offline, --open, --release, --timings, --unit-graph, -h, -q, -v. Valued: --bin, --color, --config, --example, --features, --jobs, --manifest-path, --message-format, --package, --profile, --target, --target-dir, -Z, -j, -p
- **expand**: Flags: --all-features, --help, --lib, --no-default-features, --release, --tests, --ugly, -h. Valued: --bin, --color, --example, --features, --manifest-path, --package, --target, --theme, -p
- **fmt** (requires --check): Flags: --all, --check, --help, -h, -q, -v. Valued: --manifest-path, --message-format, --package, -p
- **generate-lockfile**: Flags: --frozen, --help, --locked, --offline, -h, -q, -v. Valued: --color, --config, --manifest-path
- **help**: Positional args accepted
- **info**: Flags: --frozen, --help, --locked, --offline, -h, -q, -v. Valued: --color, --config, --index, --registry
- **install**: Flags: --help, -h
- **license**: Flags: --frozen, --help, --locked, --offline, -h, -q, -v. Valued: --color, --config, --manifest-path
- **llvm-cov**: Flags: --all-features, --all-targets, --help, --html, --json, --lcov, --lib, --locked, --no-cfg-coverage, --no-default-features, --no-fail-fast, --no-run, --open, --release, --text, -h. Valued: --bin, --branch, --codecov, --cobertura, --color, --config, --example, --exclude, --features, --ignore-filename-regex, --ignore-run-fail, --jobs, --manifest-path, --output-dir, --output-path, --package, --profile, --target, --target-dir, --test, -j, -p
- **locate-project**: Flags: --frozen, --help, --locked, --offline, -h, -q, -v. Valued: --color, --config, --manifest-path
- **machete**: Flags: --help, --skip-target-dir, --with-metadata, -V, -h
- **metadata**: Flags: --all-features, --frozen, --help, --locked, --no-default-features, --no-deps, --offline, -h, -q, -v. Valued: --color, --config, --features, --filter-platform, --format-version, --manifest-path
- **nextest archive**: Flags: --all-features, --help, --locked, --no-default-features, --release, -h. Valued: --archive-file, --archive-format, --cargo-profile, --features, --manifest-path, --package, --target, --target-dir, -p
- **nextest list**: Flags: --all-features, --help, --lib, --locked, --no-default-features, --release, -T, -h. Valued: --bin, --color, --config, --exclude, --features, --manifest-path, --message-format, --package, --partition, --profile, --target, --target-dir, --test, -E, -p
- **nextest run**: Flags: --all-features, --all-targets, --help, --lib, --locked, --no-capture, --no-default-features, --no-fail-fast, --release, --status-level, -h. Valued: --bin, --cargo-profile, --color, --config, --exclude, --features, --jobs, --manifest-path, --package, --partition, --profile, --retries, --target, --target-dir, --test, --test-threads, --threads, -E, -j, -p
- **nextest show-config**: Flags: --help, -h
- **outdated**: Flags: --aggressive, --color, --depth, --exit-code, --features, --help, --manifest-path, --packages, --root-deps-only, --verbose, --workspace, -R, -V, -d, -h, -n, -q, -r, -v, -w. Valued: --color, --depth, --exclude, --features, --ignore, --manifest-path, --packages, -d, -e, -i, -p
- **package** (requires --list, -l): Flags: --all-features, --frozen, --help, --keep-going, --list, --locked, --no-default-features, --no-metadata, --offline, --workspace, -h, -l, -q, -v. Valued: --color, --config, --exclude, --features, --jobs, --manifest-path, --message-format, --package, --target, --target-dir, -F, -Z, -j, -p
- **pkgid**: Flags: --frozen, --help, --locked, --offline, -h, -q, -v. Valued: --color, --config, --manifest-path
- **publish** (requires --dry-run, -n): Flags: --all-features, --dry-run, --frozen, --help, --keep-going, --locked, --no-default-features, --offline, --workspace, -h, -n, -q, -v. Valued: --color, --config, --exclude, --features, --index, --jobs, --manifest-path, --package, --registry, --target, --target-dir, -F, -Z, -j, -p
- **read-manifest**: Flags: --frozen, --help, --locked, --offline, -h, -q, -v. Valued: --color, --config, --manifest-path
- **run**: Flags: --help, -h
- **search**: Flags: --frozen, --help, --locked, --offline, -h, -q, -v. Valued: --color, --config, --index, --limit, --registry
- **semver-checks check-release**: Flags: --all-features, --default-features, --help, --verbose, -h, -v. Valued: --baseline-rev, --baseline-root, --baseline-version, --color, --config-path, --current-rustdoc, --exclude, --features, --manifest-path, --package, --release-type, --target, -j, -p
- **test**: Flags: --all-features, --all-targets, --benches, --bins, --doc, --examples, --frozen, --future-incompat-report, --help, --ignore-rust-version, --keep-going, --lib, --locked, --no-default-features, --no-fail-fast, --no-run, --offline, --release, --tests, --timings, --unit-graph, -h, -q, -v. Valued: --bench, --bin, --color, --config, --example, --features, --jobs, --manifest-path, --message-format, --package, --profile, --target, --target-dir, --test, -Z, -j, -p
- **tree**: Flags: --all-features, --duplicates, --frozen, --help, --ignore-rust-version, --locked, --no-dedupe, --no-default-features, --offline, -d, -e, -h, -i, -q, -v. Valued: --charset, --color, --config, --depth, --edges, --features, --format, --invert, --manifest-path, --package, --prefix, --prune, --target, -p
- **update** (requires --dry-run): Flags: --aggressive, --dry-run, --frozen, --help, --locked, --offline, --recursive, --workspace, -h, -q, -v. Valued: --color, --config, --manifest-path, --package, --precise, -p
- **verify-project**: Flags: --frozen, --help, --locked, --offline, -h, -q, -v. Valued: --color, --config, --manifest-path
- **version**: Flags: --help, -h. Positional args accepted
- Allowed standalone flags: --help, --version, -V, -h

### `cat` (https://www.gnu.org/software/coreutils/manual/coreutils.html#cat-invocation)

- Allowed standalone flags: -A, -E, -T, -V, -b, -e, -h, -l, -n, -s, -t, -u, -v, --help, --number, --number-nonblank, --show-all, --show-ends, --show-nonprinting, --show-tabs, --squeeze-blank, --version
- Bare invocation allowed

### `cd` (https://man7.org/linux/man-pages/man1/cd.1p.html)

- Allowed standalone flags: --help, --version, -L, -P, -V, -e, -h
- Bare invocation allowed

### `cf` (https://cli.cloudfoundry.org/en-US/v8/)

- **app**: Flags: --guid, --help, -h
- **apps**: Flags: --help, -h. Valued: --labels
- **buildpacks**: Flags: --help, -h
- **domains**: Flags: --help, -h
- **env**: Flags: --help, -h
- **events**: Flags: --help, -h
- **feature-flag**: Flags: --help, -h
- **feature-flags**: Flags: --help, -h
- **logs** (requires --recent): Flags: --help, --recent, -h
- **marketplace**: Flags: --help, -h. Valued: --no-plans, -e
- **org**: Flags: --guid, --help, -h
- **orgs**: Flags: --help, -h
- **plugins**: Flags: --checksum, --help, --outdated, -h
- **quota**: Flags: --help, -h
- **quotas**: Flags: --help, -h
- **routes**: Flags: --help, --orglevel, -h
- **security-group**: Flags: --help, -h
- **security-groups**: Flags: --help, -h
- **service**: Flags: --guid, --help, --params, -h
- **services**: Flags: --help, -h
- **space**: Flags: --guid, --help, -h
- **spaces**: Flags: --help, -h
- **stack**: Flags: --guid, --help, -h
- **stacks**: Flags: --help, -h
- **tasks**: Flags: --help, -h
- **version**
- Allowed standalone flags: --help, --version, -h

### `cksum` (https://www.gnu.org/software/coreutils/manual/coreutils.html#cksum-invocation)

- Allowed standalone flags: --base64, --check, --help, --raw, --strict, --tag, --untagged, --version, --warn, --zero, -V, -c, -h, -w, -z
- Allowed valued flags: --algorithm, --length, -a, -l
- Bare invocation allowed

### `clang` (https://clang.llvm.org/docs/CommandGuide/clang.html)

Aliases: `clang++`

- Allowed standalone flags: --help, --version, -v

### `claude` (https://docs.anthropic.com/en/docs/claude-code)

- **agents**: Positional args accepted
- **auth logout**: Positional args accepted
- **auth status**: Positional args accepted
- **auto-mode config**: Positional args accepted
- **auto-mode defaults**: Positional args accepted
- **doctor**: Positional args accepted
- **mcp add**: Positional args accepted
- **mcp add-from-claude-desktop**: Positional args accepted
- **mcp add-json**: Positional args accepted
- **mcp get**: Positional args accepted
- **mcp list**: Positional args accepted
- **mcp remove**: Positional args accepted
- **mcp reset-project-choices**: Positional args accepted
- **plugin disable**: Positional args accepted
- **plugin enable**: Positional args accepted
- **plugin install**: Positional args accepted
- **plugin list**: Positional args accepted
- **plugin marketplace add**: Positional args accepted
- **plugin marketplace list**: Positional args accepted
- **plugin marketplace remove**: Positional args accepted
- **plugin marketplace update**: Positional args accepted
- **plugin uninstall**: Positional args accepted
- **plugin update**: Positional args accepted
- **plugin validate**: Positional args accepted
- **plugins disable**: Positional args accepted
- **plugins enable**: Positional args accepted
- **plugins install**: Positional args accepted
- **plugins list**: Positional args accepted
- **plugins marketplace add**: Positional args accepted
- **plugins marketplace list**: Positional args accepted
- **plugins marketplace remove**: Positional args accepted
- **plugins marketplace update**: Positional args accepted
- **plugins uninstall**: Positional args accepted
- **plugins update**: Positional args accepted
- **plugins validate**: Positional args accepted
- Allowed standalone flags: --help, --version, -V, -h

### `cloc` (https://github.com/AlDanial/cloc#readme)

- Allowed standalone flags: --3, --autoconf, --by-file, --by-file-by-lang, --by-percent, --categorized, --counted, --diff, --diff-list-file, --docstring-as-code, --follow-links, --force-lang-def, --found-langs, --git, --help, --hide-rate, --ignored, --include-content, --json, --md, --no-autogen, --no3, --opt-match-d, --opt-match-f, --opt-not-match-d, --opt-not-match-f, --original-dir, --progress-rate, --quiet, --sdir, --show-ext, --show-lang, --show-os, --show-stored-lang, --skip-uniqueness, --sql-append, --strip-comments, --sum-one, --sum-reports, --unicode, --use-sloccount, --v, --vcs, --version, --xml, --yaml, -V, -h, -v
- Allowed valued flags: --config, --csv-delimiter, --diff-alignment, --diff-timeout, --exclude-content, --exclude-dir, --exclude-ext, --exclude-lang, --exclude-list-file, --force-lang, --fullpath, --include-ext, --include-lang, --lang-no-ext, --list-file, --match-d, --match-f, --not-match-d, --not-match-f, --out, --read-binary-files, --read-lang-def, --report-file, --script-lang, --skip-archive, --sql, --sql-project, --sql-style, --timeout, --write-lang-def

### `cmake` (https://cmake.org/cmake/help/latest/manual/cmake.1.html)

- Allowed standalone flags: --help, --system-information, --version, -V, -h

### `cmp` (https://man7.org/linux/man-pages/man1/cmp.1.html)

- Allowed standalone flags: --help, --print-bytes, --quiet, --silent, --verbose, --version, -V, -b, -h, -l, -s
- Allowed valued flags: --bytes, --ignore-initial, -i, -n

### `codesign` (https://ss64.com/mac/codesign.html)

- Requires --display, --verify, -d, -v. - Allowed standalone flags: --deep, --display, --verify, -R, -d, -v, --help, -h
- Allowed valued flags: --verbose

### `codex` (https://github.com/openai/codex)

- **apply**: Positional args accepted
- **cloud apply**: Positional args accepted
- **cloud diff**: Positional args accepted
- **cloud list**: Positional args accepted
- **cloud status**: Positional args accepted
- **completion**: Flags: --help, -h. Valued: --shell, -s
- **debug app-server**: Positional args accepted
- **exec**: Positional args accepted
- **features disable**: Positional args accepted
- **features enable**: Positional args accepted
- **features list**: Flags: --help, -h
- **fork**: Positional args accepted
- **mcp add**: Positional args accepted
- **mcp get**: Positional args accepted
- **mcp list**: Positional args accepted
- **mcp remove**: Positional args accepted
- **resume**: Positional args accepted
- **review**: Positional args accepted
- **sandbox**: Positional args accepted
- Allowed standalone flags: --help, --version, -V, -h

### `col` (https://man7.org/linux/man-pages/man1/col.1.html)

- Allowed standalone flags: -V, -b, -f, -h, -p, -x, --help, --version
- Allowed valued flags: -l
- Bare invocation allowed

### `colordiff` (https://www.colordiff.org/)

- Allowed standalone flags: --brief, --ed, --expand-tabs, --help, --initial-tab, --left-column, --minimal, --normal, --paginate, --rcs, --report-identical-files, --side-by-side, --speed-large-files, --strip-trailing-cr, --suppress-blank-empty, --suppress-common-lines, --text, --version, -B, -E, -N, -P, -T, -V, -Z, -a, -b, -c, -d, -e, -f, -h, -i, -l, -n, -p, -q, -r, -s, -t, -u, -v, -w, -y
- Allowed valued flags: --changed-group-format, --color, --context, --from-file, --horizon-lines, --ifdef, --ignore-matching-lines, --label, --line-format, --new-group-format, --new-line-format, --old-group-format, --old-line-format, --show-function-line, --starting-file, --tabsize, --to-file, --unchanged-group-format, --unchanged-line-format, --unified, --width, -C, -D, -F, -I, -L, -S, -U, -W

### `column` (https://man7.org/linux/man-pages/man1/column.1.html)

- Allowed standalone flags: -J, -L, -R, -V, -e, -h, -n, -t, -x, --fillrows, --help, --json, --keep-empty-lines, --table, --table-noextreme, --table-noheadings, --table-right-all, --version
- Allowed valued flags: -E, -H, -O, -W, -c, -d, -o, -r, -s, --output-separator, --separator, --table-columns, --table-empty-lines, --table-hide, --table-name, --table-order, --table-right, --table-truncate, --table-wrap
- Bare invocation allowed

### `comm` (https://www.gnu.org/software/coreutils/manual/coreutils.html#comm-invocation)

- Allowed standalone flags: -1, -2, -3, -V, -h, -i, -z, --check-order, --help, --nocheck-order, --total, --version, --zero-terminated
- Allowed valued flags: --output-delimiter

### `command` (https://man7.org/linux/man-pages/man1/command.1p.html)

- Requires -v, -V, --version. - Allowed standalone flags: --help, --version, -h
- Allowed valued flags: -v, -V

### `composer` (https://getcomposer.org/doc/03-cli.md)

- **about**: Flags: --help, -h
- **audit**: Flags: --abandoned, --help, --locked, --no-dev, -h. Valued: --format, -f
- **check-platform-reqs**: Flags: --help, -h
- **diagnose**: Flags: --help, -h
- **fund**: Flags: --help, -h
- **help**: Flags: --help, -h
- **info**: Flags: --all, --available, --direct, --help, --installed, --latest, --locked, --minor-only, --name-only, --no-dev, --outdated, --path, --platform, --self, --strict, --tree, --versions, -D, -H, -N, -P, -a, -h, -i, -l, -o, -s, -t. Valued: --format, --ignore, -f
- **licenses**: Flags: --help, -h
- **outdated**: Flags: --all, --direct, --help, --locked, --minor-only, --no-dev, --strict, -D, -a, -h, -m. Valued: --format, --ignore, -f
- **show**: Flags: --all, --available, --direct, --help, --installed, --latest, --locked, --minor-only, --name-only, --no-dev, --outdated, --path, --platform, --self, --strict, --tree, --versions, -D, -H, -N, -P, -a, -h, -i, -l, -o, -s, -t. Valued: --format, --ignore, -f
- **suggests**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -V, -h

### `conda` (https://docs.conda.io/projects/conda/en/stable/commands/index.html)

- **config** (requires --show, --show-sources): Flags: --help, --json, --quiet, --show, --show-sources, --verbose, -h, -q, -v. Valued: --env, --file, --name, --prefix, -f, -n, -p
- **info**: Flags: --all, --envs, --help, --json, --verbose, -a, -e, -h, -v
- **list**: Flags: --explicit, --export, --full-name, --help, --json, --no-pip, --revisions, -e, -f, -h. Valued: --name, --prefix, -n, -p
- Allowed standalone flags: --help, --version, -V, -h

### `cosign` (https://github.com/sigstore/cosign)

- **tree**: Flags: --help, -h
- **triangulate**: Flags: --help, -h. Valued: --type
- **verify**: Flags: --check-claims, --help, --local-image, --offline, -h. Valued: --attachment, --certificate, --certificate-chain, --certificate-identity, --certificate-identity-regexp, --certificate-oidc-issuer, --certificate-oidc-issuer-regexp, --k8s-keychain, --key, --output, --payload, --rekor-url, --signature, --slot, -o
- **verify-attestation**: Flags: --check-claims, --help, --local-image, --offline, -h. Valued: --certificate, --certificate-identity, --certificate-oidc-issuer, --key, --output, --policy, --rekor-url, --type, -o
- **version**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -h

### `coverage` (https://coverage.readthedocs.io/)

- **combine**: Flags: --append, --help, --keep, -a, -h. Valued: --data-file
- **html**: Flags: --help, --ignore-errors, --include, --omit, --show-contexts, --skip-covered, --skip-empty, -h. Valued: --data-file, --directory, --fail-under, --precision, --title, -d
- **json**: Flags: --help, --ignore-errors, --include, --omit, --pretty-print, -h. Valued: --data-file, --fail-under, -o
- **report**: Flags: --help, --ignore-errors, --include, --no-skip-covered, --omit, --show-missing, --skip-covered, --skip-empty, -h, -m. Valued: --data-file, --fail-under, --precision, --sort
- **run**: Flags: --append, --branch, --concurrency, --help, --parallel, --source, --timid, -a, -h, -p. Valued: --context, --data-file, --include, --omit, --rcfile, --source. Positional args accepted
- Allowed standalone flags: --help, --version, -h

### `craft` (https://craftcms.com/docs/5.x/reference/cli.html)

- **env/show**: Flags: --help, -h
- **graphql/list-schemas**: Flags: --help, -h
- **graphql/print-schema**: Flags: --help, -h
- **help**: Flags: --help, -h
- **install/check**: Flags: --help, -h
- **migrate/history**: Flags: --help, -h
- **migrate/new**: Flags: --help, -h
- **pc/diff**: Flags: --help, -h
- **pc/export**: Flags: --help, -h
- **pc/get**: Flags: --help, -h
- **plugin/list**: Flags: --help, -h
- **queue/info**: Flags: --help, -h
- **update/info**: Flags: --help, -h
- **users/list-admins**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -V, -h

### `crane` (https://github.com/google/go-containerregistry)

- **blob**: Flags: --help, -h
- **catalog**: Flags: --full-ref, --help, -h
- **config**: Flags: --help, -h
- **digest**: Flags: --full-ref, --help, --tarball, -h
- **ls**: Flags: --full-ref, --help, --omit-digest-tags, -h
- **manifest**: Flags: --help, -h
- **validate**: Flags: --fast, --help, --remote, --tarball, -h
- **version**: Flags: --help, -h
- Allowed standalone flags: --help, -h

### `crontab` (https://ss64.com/mac/crontab.html)

- Requires -l. - Allowed standalone flags: -l, --help, -h
- Allowed valued flags: -u

### `csrutil` (https://ss64.com/mac/csrutil.html)

- **authenticated-root**: Flags: --help, -h
- **report**: Flags: --help, -h
- **status**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -V, -h

### `cucumber` (https://cucumber.io/docs/cucumber/api/#running-cucumber)

- Allowed standalone flags: --backtrace, --color, --dry-run, --expand, --guess, --help, --i18n-keywords, --i18n-languages, --init, --no-color, --no-diff, --no-multiline, --no-snippets, --no-source, --no-strict, --publish, --publish-quiet, --quiet, --retry, --snippets, --strict, --verbose, --version, --wip, -V, -b, -d, -e, -h, -q
- Allowed valued flags: --ci-environment, --format, --format-options, --language, --lines, --name, --order, --out, --profile, --require, --require-module, --retry, --tags, -f, -i, -l, -n, -o, -p, -r, -t
- Bare invocation allowed

### `curl` (https://curl.se/docs/manpage.html)

- Allowed standalone flags: --compressed, --fail, --globoff, --head, --insecure, --ipv4, --ipv6, --location, --no-buffer, --no-progress-meter, --show-error, --silent, --verbose, -4, -6, -I, -L, -N, -S, -f, -g, -k, -s, -v.
- Allowed valued flags: --connect-timeout, --max-time, --write-out, -m, -w.
- Allowed methods (-X/--request): GET, HEAD, OPTIONS.
- -H/--header allowed with safe headers (Accept, User-Agent, Authorization, Cookie, Cache-Control, Range, etc.).
- -o/--output and -O/--remote-name allowed (writes files).

### `cut` (https://www.gnu.org/software/coreutils/manual/coreutils.html#cut-invocation)

- Allowed standalone flags: -V, -h, -n, -s, -w, -z, --complement, --help, --only-delimited, --version, --zero-terminated
- Allowed valued flags: -b, -c, -d, -f, --bytes, --characters, --delimiter, --fields, --output-delimiter

### `dasel` (https://github.com/TomWright/dasel)

- Read-only queries allowed. select subcommand allowed.

### `date` (https://www.gnu.org/software/coreutils/manual/coreutils.html#date-invocation)

- Allowed standalone flags: --help, --rfc-2822, --rfc-email, --universal, --utc, --version, -R, -V, -h, -j, -n, -u
- Allowed valued flags: --date, --iso-8601, --reference, --rfc-3339, -I, -d, -f, -r, -v, -z
- Bare invocation allowed

### `dcli` (https://cli.dashlane.com/)

- **accounts whoami**: Flags: --help, -h
- **devices list**: Flags: --help, --json, -h
- **lock**: Flags: --help, -h
- **sync**: Flags: --help, -h
- **team credentials list**: Flags: --help, --json, -h
- **team dark-web-insights**: Flags: --help, -h. Valued: --count, --offset, --order-by
- **team logs**: Flags: --csv, --help, --human-readable, -h. Valued: --end, --start
- **team members**: Flags: --csv, --help, --human-readable, -h
- **team public-api list-keys**: Flags: --help, --json, -h
- **team report**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -V, -h

### `ddev` (https://ddev.readthedocs.io/en/stable/users/usage/commands/)

- **aliases**: Flags: --help, -h
- **debug configyaml**: Flags: --help, -h
- **debug diagnose**: Flags: --help, -h
- **debug mutagen**: Flags: --help, -h
- **debug test**: Flags: --help, -h
- **describe**: Flags: --help, --json-output, -h, -j
- **list**: Flags: --help, --json-output, -h, -j
- **logs**: Flags: --follow, --help, --time, --timestamps, -f, -h. Valued: --service, --tail, -s, -t
- **snapshot** (requires --list): Flags: --all, --help, --list, -h
- **status**: Flags: --help, --json-output, -h, -j
- **version**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -V, -h

### `declare` (https://www.gnu.org/software/bash/manual/html_node/Bash-Builtins.html)

Aliases: `typeset`

- Allowed standalone flags: -A, -F, -a, -f, -g, -i, -l, -n, -p, -r, -t, -u, -x
- Bare invocation allowed
- Hyphen-prefixed positional arguments accepted

### `defaults` (https://ss64.com/mac/defaults.html)

- **domains**: Flags: --help, -h
- **export**: Flags: --help, -g, -globalDomain, -h. Valued: -app
- **find**: Flags: --help, -g, -globalDomain, -h. Valued: -app
- **read**: Flags: --help, -g, -globalDomain, -h. Valued: -app
- **read-type**: Flags: --help, -g, -globalDomain, -h. Valued: -app
- Allowed standalone flags: --help, --version, -V, -h

### `delta` (https://dandavison.github.io/delta/)

- Allowed standalone flags: --blame-code-style, --blame-palette, --color-only, --dark, --diff-highlight, --diff-so-fancy, --help, --hyperlinks, --keep-plus-minus-markers, --light, --line-numbers, --list-languages, --list-syntax-themes, --navigate, --no-gitconfig, --raw, --relative-paths, --show-config, --show-syntax-themes, --side-by-side, --version, -V, -h, -n, -s
- Allowed valued flags: --commit-decoration-style, --commit-style, --config, --diff-stat-align-width, --features, --file-added-label, --file-decoration-style, --file-modified-label, --file-removed-label, --file-renamed-label, --file-style, --file-transformation, --hunk-header-decoration-style, --hunk-header-file-style, --hunk-header-line-number-style, --hunk-header-style, --hunk-label, --inline-hint-style, --inspect-raw-lines, --line-buffer-size, --line-fill-method, --line-numbers-left-format, --line-numbers-left-style, --line-numbers-minus-style, --line-numbers-plus-style, --line-numbers-right-format, --line-numbers-right-style, --line-numbers-zero-style, --map-styles, --max-line-distance, --max-line-length, --merge-conflict-begin-symbol, --merge-conflict-end-symbol, --merge-conflict-ours-diff-header-decoration-style, --merge-conflict-ours-diff-header-style, --merge-conflict-theirs-diff-header-decoration-style, --merge-conflict-theirs-diff-header-style, --minus-emph-style, --minus-empty-line-marker-style, --minus-non-emph-style, --minus-style, --paging, --plus-emph-style, --plus-empty-line-marker-style, --plus-non-emph-style, --plus-style, --syntax-theme, --tabs, --true-color, --whitespace-error-style, --width, -w
- Bare invocation allowed

### `deno` (https://docs.deno.com/runtime/reference/cli/)

- **check**: Flags: --help, --json, --no-lock, --quiet, --unstable, -h, -q. Valued: --config, --import-map, -c
- **doc**: Flags: --help, --json, --no-lock, --quiet, --unstable, -h, -q. Valued: --config, --import-map, -c
- **fmt** (requires --check): Flags: --check, --help, --no-semicolons, --single-quote, --unstable, -h, -q. Valued: --config, --ext, --ignore, --indent-width, --line-width, --log-level, --prose-wrap, -c
- **info**: Flags: --help, --json, --no-lock, --quiet, --unstable, -h, -q. Valued: --config, --import-map, -c
- **lint**: Flags: --help, --json, --no-lock, --quiet, --unstable, -h, -q. Valued: --config, --import-map, -c
- **test**: Flags: --help, --json, --no-lock, --quiet, --unstable, -h, -q. Valued: --config, --import-map, -c
- Allowed standalone flags: --help, --version, -V, -h

### `detekt` (https://detekt.dev/docs/gettingstarted/cli/)

- Allowed standalone flags: --build-upon-default-config, --debug, --help, --parallel, --version, -V, -h
- Allowed valued flags: --baseline, --classpath, --config, --config-resource, --excludes, --includes, --input, --jvm-target, --language-version, --plugins, --report
- Bare invocation allowed

### `devbox` (https://www.jetify.com/devbox/docs/)

- **info**: Flags: --help, --json, --markdown, -h
- **list**: Flags: --help, -h
- **search**: Flags: --help, -h
- **version**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -h

### `df` (https://www.gnu.org/software/coreutils/manual/coreutils.html#df-invocation)

- Allowed standalone flags: --all, --help, --human-readable, --inodes, --local, --no-sync, --portability, --print-type, --si, --sync, --total, --version, -H, -P, -T, -V, -a, -h, -i, -k, -l
- Allowed valued flags: --block-size, --exclude-type, --output, --type, -B, -t, -x
- Bare invocation allowed

### `diff` (https://www.gnu.org/software/diffutils/manual/diffutils.html)

- Allowed standalone flags: --brief, --ed, --expand-tabs, --help, --ignore-all-space, --ignore-blank-lines, --ignore-case, --ignore-space-change, --ignore-tab-expansion, --left-column, --minimal, --new-file, --no-dereference, --no-ignore-file-name-case, --normal, --paginate, --rcs, --recursive, --report-identical-files, --show-c-function, --side-by-side, --speed-large-files, --strip-trailing-cr, --suppress-blank-empty, --suppress-common-lines, --text, --unidirectional-new-file, --version, -B, -E, -N, -P, -T, -V, -a, -b, -c, -d, -e, -f, -h, -i, -l, -n, -p, -q, -r, -s, -t, -u, -w, -y
- Allowed valued flags: --changed-group-format, --color, --context, --exclude, --exclude-from, --from-file, --ifdef, --ignore-matching-lines, --label, --line-format, --new-group-format, --new-line-format, --old-group-format, --old-line-format, --show-function-line, --starting-file, --tabsize, --to-file, --unchanged-group-format, --unchanged-line-format, --unified, --width, -C, -D, -F, -I, -L, -S, -U, -W, -X, -x

### `difft` (https://difftastic.wilfred.me.uk/)

Aliases: `difftastic`

- Allowed standalone flags: --check-only, --help, --list-languages, --missing-as-empty, --skip-unchanged, --strip-cr, --version
- Allowed valued flags: --background, --byte-limit, --color, --context, --display, --graph-limit, --language, --override, --parse-error-limit, --sort-paths, --syntax-highlight, --tab-width, --width

### `dig` (https://man7.org/linux/man-pages/man1/dig.1.html)

- Allowed standalone flags: --help, --version, -4, -6, -V, -h, -m, -r, -u, -v
- Allowed valued flags: -b, -c, -f, -k, -p, -q, -t, -x, -y
- Bare invocation allowed

### `direnv` (https://direnv.net/)

- **export**: Flags: --help, -h
- **fetchurl**: Flags: --help, -h
- **status**: Flags: --help, -h
- **version**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -h

### `dirname` (https://www.gnu.org/software/coreutils/manual/coreutils.html#dirname-invocation)

- Allowed standalone flags: --help, --version, --zero, -V, -h, -z

### `diskutil` (https://ss64.com/mac/diskutil.html)

- **activity**: Flags: --help, -h
- **apfs list**: Flags: --help, -h
- **apfs listCryptoUsers**: Flags: --help, -h
- **apfs listSnapshots**: Flags: --help, -h
- **apfs listVolumeGroups**: Flags: --help, -h
- **info**: Flags: --help, -all, -h, -plist
- **list**: Flags: --help, -h, -plist
- **listFilesystems**: Flags: --help, -h, -plist
- Allowed standalone flags: --help, --version, -V, -h

### `docker` (https://docs.docker.com/reference/cli/docker/)

- **buildx --version**
- **buildx inspect**: Flags: --help, -h
- **buildx ls**: Flags: --help, -h
- **buildx version**: Flags: --help, -h
- **compose --version**
- **compose config**: Flags: --dry-run, --hash, --help, --images, --no-consistency, --no-interpolate, --no-normalize, --no-path-resolution, --profiles, --quiet, --resolve-image-digests, --services, --volumes, -h, -q. Valued: --format, --output, -o
- **compose images**: Flags: --help, -h
- **compose ls**: Flags: --help, -h
- **compose port**: Flags: --help, --index, --protocol, -h
- **compose ps**: Flags: --all, --help, --no-trunc, --orphans, --quiet, --services, -a, -h, -q. Valued: --filter, --format, --status
- **compose top**: Flags: --help, -h
- **compose version**: Flags: --help, -h
- **container diff**: Flags: --help, -h
- **container inspect**: Flags: --help, --size, -h, -s. Valued: --format, --type, -f
- **container list**: Flags: --all, --help, --last, --latest, --no-trunc, --quiet, --size, -a, -h, -l, -n, -q, -s. Valued: --filter, --format, -f
- **container logs**: Flags: --details, --follow, --help, --timestamps, -f, -h, -t. Valued: --since, --tail, --until, -n
- **container ls**: Flags: --all, --help, --last, --latest, --no-trunc, --quiet, --size, -a, -h, -l, -n, -q, -s. Valued: --filter, --format, -f
- **container port**: Flags: --help, -h
- **container stats**: Flags: --all, --help, --no-stream, --no-trunc, -a, -h. Valued: --format
- **container top**: Flags: --help, -h
- **context inspect**: Flags: --help, --no-trunc, --quiet, -h, -q. Valued: --filter, --format, -f
- **context ls**: Flags: --help, --no-trunc, --quiet, -h, -q. Valued: --filter, --format, -f
- **context show**: Flags: --help, --no-trunc, --quiet, -h, -q. Valued: --filter, --format, -f
- **diff**: Flags: --help, -h
- **history**: Flags: --help, --human, --no-trunc, --quiet, -H, -h, -q. Valued: --format
- **image history**: Flags: --help, --human, --no-trunc, --quiet, -H, -h, -q. Valued: --format
- **image inspect**: Flags: --help, --size, -h, -s. Valued: --format, --type, -f
- **image list**: Flags: --all, --digests, --help, --no-trunc, --quiet, -a, -h, -q. Valued: --filter, --format, -f
- **image ls**: Flags: --all, --digests, --help, --no-trunc, --quiet, -a, -h, -q. Valued: --filter, --format, -f
- **images**: Flags: --all, --digests, --help, --no-trunc, --quiet, -a, -h, -q. Valued: --filter, --format, -f
- **info**: Flags: --help, -h. Valued: --format, -f
- **inspect**: Flags: --help, --size, -h, -s. Valued: --format, --type, -f
- **logs**: Flags: --details, --follow, --help, --timestamps, -f, -h, -t. Valued: --since, --tail, --until, -n
- **manifest inspect**: Flags: --help, --size, -h, -s. Valued: --format, --type, -f
- **network inspect**: Flags: --help, --no-trunc, --quiet, -h, -q. Valued: --filter, --format, -f
- **network ls**: Flags: --help, --no-trunc, --quiet, -h, -q. Valued: --filter, --format, -f
- **port**: Flags: --help, -h
- **ps**: Flags: --all, --help, --last, --latest, --no-trunc, --quiet, --size, -a, -h, -l, -n, -q, -s. Valued: --filter, --format, -f
- **stats**: Flags: --all, --help, --no-stream, --no-trunc, -a, -h. Valued: --format
- **system df**: Flags: --help, -h. Valued: --format, -f
- **system info**: Flags: --help, -h. Valued: --format, -f
- **top**: Flags: --help, -h
- **version**: Flags: --help, -h. Valued: --format, -f
- **volume inspect**: Flags: --help, --no-trunc, --quiet, -h, -q. Valued: --filter, --format, -f
- **volume ls**: Flags: --help, --no-trunc, --quiet, -h, -q. Valued: --filter, --format, -f
- Allowed standalone flags: --help, --version, -V, -h

### `doctl` (https://docs.digitalocean.com/reference/doctl/)

- **account get**: Flags: --help, -h
- **apps get**: Flags: --help, -h
- **apps list**: Flags: --help, -h
- **balance get**: Flags: --help, -h
- **compute droplet**: Allowed arguments: list, get
- **compute firewall**: Allowed arguments: list, get
- **compute image**: Allowed arguments: list, get
- **compute region**: Allowed arguments: list
- **compute size**: Allowed arguments: list
- **compute volume**: Allowed arguments: list, get
- **databases get**: Flags: --help, -h
- **databases list**: Flags: --help, -h
- **kubernetes cluster**: Allowed arguments: list, get
- **projects list**: Flags: --help, -h
- **version**
- Allowed standalone flags: --help, --version, -h, -v

### `dotenv` (https://github.com/bkeepers/dotenv)

- Recursively validates the inner command.

### `dotnet` (https://learn.microsoft.com/en-us/dotnet/core/tools/)

- **build**: Flags: --force, --help, --no-dependencies, --no-incremental, --no-restore, --nologo, --self-contained, --tl, --use-current-runtime, -h. Valued: --arch, --artifacts-path, --configuration, --framework, --os, --output, --property, --runtime, --source, --verbosity, --version-suffix, -a, -c, -f, -o, -p, -r, -s, -v
- **list**: Flags: --deprecated, --help, --highest-minor, --highest-patch, --include-prerelease, --include-transitive, --outdated, --vulnerable, -h. Valued: --config, --format, --framework, --source, --verbosity, -v
- **test**: Flags: --blame, --blame-crash, --blame-hang, --force, --help, --list-tests, --no-build, --no-dependencies, --no-restore, --nologo, -h. Valued: --arch, --artifacts-path, --blame-crash-collect-always, --blame-crash-dump-type, --blame-hang-dump-type, --blame-hang-timeout, --collect, --configuration, --diag, --environment, --filter, --framework, --logger, --os, --output, --property, --results-directory, --runtime, --settings, --test-adapter-path, --verbosity, -a, -c, -d, -e, -f, -l, -o, -r, -s, -v
- Allowed standalone flags: --help, --info, --list-runtimes, --list-sdks, --version, -V, -h

### `du` (https://www.gnu.org/software/coreutils/manual/coreutils.html#du-invocation)

- Allowed standalone flags: --all, --apparent-size, --bytes, --count-links, --dereference, --dereference-args, --help, --human-readable, --inodes, --no-dereference, --null, --one-file-system, --separate-dirs, --si, --summarize, --total, --version, -0, -D, -H, -L, -P, -S, -V, -a, -b, -c, -h, -k, -l, -m, -s, -x
- Allowed valued flags: --block-size, --exclude, --files0-from, --max-depth, --threshold, --time, --time-style, -B, -d, -t
- Bare invocation allowed

### `duf` (https://github.com/muesli/duf)

- Allowed standalone flags: --all, --help, --hide-fs, --hide-mp, --inodes, --json, --version, --warnings
- Allowed valued flags: --only, --output, --sort, --style, --theme, --width
- Bare invocation allowed

### `dust` (https://github.com/bootandy/dust#readme)

- Allowed standalone flags: --bars-on-right, --files0-from, --help, --ignore-all-in-file, --invert-filter, --no-colors, --no-percent-bars, --only-dir, --only-file, --skip-total, --version, -D, -F, -H, -P, -R, -S, -V, -b, -c, -f, -h, -i, -p, -r, -s
- Allowed valued flags: --depth, --exclude, --filter, --terminal_width, -M, -X, -d, -e, -n, -t, -v, -w, -z
- Bare invocation allowed

### `echo` (https://www.gnu.org/software/coreutils/manual/coreutils.html#echo-invocation)

- Allowed standalone flags: -E, -e, -n
- Bare invocation allowed
- Hyphen-prefixed positional arguments accepted

### `elixir` (https://hexdocs.pm/elixir/main/elixir-cmd.html)

- Allowed standalone flags: --help, --version, -h, -v

### `emulator` (https://developer.android.com/studio/run/emulator-commandline)

- Allowed standalone flags: --help, --version, -V, -h, -help, -list-avds, -version

### `env` (https://www.gnu.org/software/coreutils/manual/coreutils.html#env-invocation)

- Strips flags (-i, -u) and KEY=VALUE pairs, then recursively validates the inner command. Bare invocation allowed.

### `erl` (https://www.erlang.org/docs/26/man/erl)

- Allowed standalone flags: --help, --version, -h

### `eslint` (https://eslint.org/docs/latest/use/command-line-interface)

- Allowed standalone flags: --cache, --color, --debug, --env-info, --help, --init, --no-color, --no-eslintrc, --no-inline-config, --print-config, --quiet, --version, -h, -v
- Allowed valued flags: --cache-location, --config, --env, --ext, --format, --global, --ignore-path, --ignore-pattern, --max-warnings, --no-error-on-unmatched-pattern, --output-file, --parser, --parser-options, --plugin, --resolve-plugins-relative-to, --rule, --rulesdir, -c, -f, -o

### `exit` (https://man7.org/linux/man-pages/man1/exit.1p.html)

- Bare invocation allowed
- Hyphen-prefixed positional arguments accepted

### `exo` (https://community.exoscale.com/documentation/tools/exoscale-cli/)

- **compute elastic-ip**: Allowed arguments: list, show
- **compute instance**: Allowed arguments: list, show
- **compute instance-type**: Allowed arguments: list, show
- **compute security-group**: Allowed arguments: list, show
- **compute ssh-key**: Allowed arguments: list, show
- **config list**: Flags: --help, -h
- **config show**: Flags: --help, -h
- **dbaas list**: Flags: --help, -h
- **dbaas show**: Flags: --help, -h
- **dbaas type**: Allowed arguments: list
- **dns list**: Flags: --help, -h
- **dns show**: Flags: --help, -h
- **limits**
- **status**
- **version**
- **zone**
- Allowed standalone flags: --help, -h

### `expand` (https://www.gnu.org/software/coreutils/manual/coreutils.html#expand-invocation)

- Allowed standalone flags: -V, -h, -i, --help, --initial, --version
- Allowed valued flags: -t, --tabs
- Bare invocation allowed

### `export` (https://man7.org/linux/man-pages/man1/export.1p.html)

- Allowed standalone flags: -f, -n, -p
- Bare invocation allowed
- Hyphen-prefixed positional arguments accepted

### `expr` (https://www.gnu.org/software/coreutils/manual/coreutils.html#expr-invocation)

- Hyphen-prefixed positional arguments accepted

### `eza` (https://eza.rocks/)

Aliases: `exa`

- Allowed standalone flags: --accessed, --all, --binary, --blocks, --blocksize, --bytes, --changed, --classify, --color-scale, --color-scale-mode, --context, --created, --dereference, --extended, --flags, --follow-symlinks, --git, --git-ignore, --git-repos, --git-repos-no-status, --group, --group-directories-first, --header, --help, --hyperlink, --icons, --inode, --links, --list-dirs, --long, --modified, --mounts, --no-filesize, --no-git, --no-icons, --no-permissions, --no-quotes, --no-time, --no-user, --numeric, --octal-permissions, --oneline, --only-dirs, --only-files, --recurse, --reverse, --tree, --version, -1, -@, -A, -B, -D, -F, -G, -H, -I, -M, -R, -S, -T, -U, -V, -Z, -a, -b, -d, -f, -g, -h, -i, -l, -m, -r, -s, -u, -x
- Allowed valued flags: --color, --colour, --git-ignore-glob, --grid-columns, --group-directories-first-dirs, --ignore-glob, --level, --smart-group, --sort, --time, --time-style, --total-size, --width, -L, -X, -t, -w
- Bare invocation allowed

### `factor` (https://www.gnu.org/software/coreutils/manual/coreutils.html#factor-invocation)

- Allowed standalone flags: --exponents, --help, --version, -V, -h
- Bare invocation allowed

### `false` (https://www.gnu.org/software/coreutils/manual/coreutils.html#false-invocation)

- Allowed standalone flags: --help, --version, -V, -h
- Bare invocation allowed

### `fastlane` (https://docs.fastlane.tools/)

- **action**: Flags: --help, -h
- **actions**: Flags: --help, -h
- **env**: Flags: --help, -h
- **lanes**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -V, -h

### `fd` (https://github.com/sharkdp/fd#readme)

- Allowed standalone flags: --absolute-path, --case-sensitive, --fixed-strings, --follow, --full-path, --glob, --has-results, --help, --hidden, --ignore, --ignore-case, --ignore-vcs, --list-details, --no-follow, --no-hidden, --no-ignore, --no-ignore-parent, --no-ignore-vcs, --no-require-git, --one-file-system, --print0, --prune, --quiet, --regex, --relative-path, --require-git, --show-errors, --unrestricted, --version, -0, -1, -F, -H, -I, -L, -V, -a, -g, -h, -i, -l, -p, -q, -s, -u
- Allowed valued flags: --and, --base-directory, --batch-size, --change-newer-than, --change-older-than, --changed-after, --changed-before, --changed-within, --color, --exact-depth, --exclude, --extension, --format, --hyperlink, --ignore-file, --max-depth, --max-results, --min-depth, --newer, --older, --owner, --path-separator, --search-path, --size, --strip-cwd-prefix, --threads, --type, -E, -S, -c, -d, -e, -j, -o, -t

### `file` (https://man7.org/linux/man-pages/man1/file.1.html)

- Allowed standalone flags: --brief, --debug, --dereference, --extension, --help, --keep-going, --list, --mime, --mime-encoding, --mime-type, --no-buffer, --no-dereference, --no-pad, --no-sandbox, --preserve-date, --print0, --raw, --special-files, --uncompress, --uncompress-noreport, --version, -0, -D, -I, -L, -N, -S, -V, -Z, -b, -d, -h, -i, -k, -l, -n, -p, -r, -s, -z
- Allowed valued flags: --exclude, --exclude-quiet, --files-from, --magic-file, --parameter, --separator, -F, -P, -e, -f, -m

### `find` (https://www.gnu.org/software/findutils/manual/html_mono/find.html)

- Positional predicates allowed. -exec/-execdir allowed when the executed command is itself safe.

### `firebase` (https://firebase.google.com/docs/cli)

- **apps:list**: Flags: --help, -h
- **functions:log**: Flags: --help, -h. Valued: --only
- **login:list**: Flags: --help, -h
- **projects:list**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -V, -h

### `flake8` (https://flake8.pycqa.org/en/latest/user/invocation.html)

- Allowed standalone flags: --benchmark, --count, --help, --quiet, --show-pep8, --show-source, --statistics, --verbose, --version, -V, -h, -q, -v
- Allowed valued flags: --config, --exclude, --extend-exclude, --extend-ignore, --filename, --format, --ignore, --max-complexity, --max-line-length, --output-file, --per-file-ignores, --select
- Bare invocation allowed

### `flyctl` (https://fly.io/docs/flyctl/)

Aliases: `fly`

- **apps list**: Flags: --help, -h
- **config show**: Flags: --help, --json, -h, -j. Valued: --app, -a
- **ips list**: Flags: --help, --json, -h, -j. Valued: --app, -a
- **logs**: Flags: --help, -h. Valued: --app, --instance, --region, -a, -i, -r
- **platform regions**: Flags: --help, -h
- **regions list**: Flags: --help, --json, -h, -j. Valued: --app, -a
- **releases**: Flags: --help, --json, -h, -j. Valued: --app, -a
- **services list**: Flags: --help, --json, -h, -j. Valued: --app, -a
- **status**: Flags: --help, --json, -h, -j. Valued: --app, -a
- **version**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -V, -h

### `fmt` (https://www.gnu.org/software/coreutils/manual/coreutils.html#fmt-invocation)

- Allowed standalone flags: -V, -c, -h, -m, -n, -s, -u, --crown-margin, --help, --split-only, --tagged-paragraph, --uniform-spacing, --version
- Allowed valued flags: -d, -g, -l, -p, -t, -w, --goal, --prefix, --width
- Bare invocation allowed

### `fnm` (https://github.com/Schniz/fnm#readme)

- **current**: Flags: --help, -h
- **default**: Flags: --help, -h
- **list**: Flags: --help, -h
- **ls-remote**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -V, -h

### `fold` (https://www.gnu.org/software/coreutils/manual/coreutils.html#fold-invocation)

- Allowed standalone flags: -V, -b, -h, -s, --bytes, --help, --spaces, --version
- Allowed valued flags: -w, --width
- Bare invocation allowed

### `free` (https://man7.org/linux/man-pages/man1/free.1.html)

- Allowed standalone flags: --bytes, --gibi, --giga, --help, --human, --kibi, --kilo, --lohi, --mebi, --mega, --si, --tebi, --tera, --total, --version, --wide, -V, -b, -g, -h, -k, -l, -m, -t, -v, -w
- Allowed valued flags: --count, --seconds, -c, -s
- Bare invocation allowed

### `fx` (https://github.com/antonmedv/fx)

- Allowed standalone flags: --help, --raw, --slurp, --themes, --version, -h, -r, -s
- Bare invocation allowed
- Hyphen-prefixed positional arguments accepted

### `fzf` (https://github.com/junegunn/fzf)

- Fuzzy finder. --bind allowed with UI-only actions (no command execution). Display, filtering, and layout flags allowed.

### `fzy` (https://github.com/jhawthorn/fzy)

- Allowed standalone flags: --help, --show-info, --show-scores, --version, -h, -i, -v
- Allowed valued flags: --lines, --prompt, --query, --show-matches, --tty, -e, -l, -p, -q, -t
- Bare invocation allowed

### `gcc` (https://gcc.gnu.org/onlinedocs/gcc/Overall-Options.html)

Aliases: `g++`, `cc`, `c++`

- Allowed standalone flags: --help, --version, -v

### `gcloud` (https://cloud.google.com/sdk/gcloud/reference)

- **access-context-manager**: Allowed arguments: levels, perimeters, policies
- **ai**: Allowed arguments: custom-jobs, endpoints, hp-tuning-jobs, index-endpoints, indexes, models, operations, tensorboards
- **ai-platform**: Allowed arguments: jobs, local, models, operations, versions
- **alloydb**: Allowed arguments: clusters, instances, operations
- **api-gateway**: Allowed arguments: apis, api-configs, gateways, operations
- **apigee**: Allowed arguments: apis, applications, archives, deployments, developers, environments, operations, organizations, products
- **app instances**: Allowed arguments: describe, list
- **app services**: Allowed arguments: describe, list
- **app versions**: Allowed arguments: describe, list
- **artifacts repositories**: Allowed arguments: describe, list
- **artifacts**: Allowed arguments: docker, files, packages, repositories, tags, versions
- **assured**: Allowed arguments: operations, workloads
- **auth list**: Flags: --filter-account, --help, -h
- **auth print-access-token**: Flags: --help, -h
- **auth print-identity-token**: Flags: --help, -h. Valued: --audiences, --include-email
- **batch**: Allowed arguments: jobs, tasks
- **bigtable**: Allowed arguments: clusters, instances, operations
- **billing**: Allowed arguments: accounts, budgets, projects
- **builds**: Allowed arguments: describe, list, log
- **certificate-manager**: Allowed arguments: certificates, dns-authorizations, maps, operations
- **composer**: Allowed arguments: environments, operations
- **compute addresses**: Allowed arguments: describe, list
- **compute disks**: Allowed arguments: describe, list
- **compute firewall-rules**: Allowed arguments: describe, list
- **compute images**: Allowed arguments: describe, list
- **compute instances**: Allowed arguments: describe, list
- **compute machine-types**: Allowed arguments: describe, list
- **compute networks**: Allowed arguments: describe, list
- **compute regions**: Allowed arguments: describe, list
- **compute snapshots**: Allowed arguments: describe, list
- **compute zones**: Allowed arguments: describe, list
- **config get**: Flags: --help, -h
- **config get-value**: Flags: --help, -h
- **config list**: Flags: --all, --help, -h
- **container clusters**: Allowed arguments: describe, list
- **container images**: Allowed arguments: describe, list
- **container node-pools**: Allowed arguments: describe, list
- **container operations**: Allowed arguments: describe, list
- **dataflow**: Allowed arguments: jobs, logs, metrics, snapshots
- **dataproc**: Allowed arguments: clusters, jobs, operations, workflow-templates
- **deploy**: Allowed arguments: delivery-pipelines, releases, rollouts, targets
- **dns managed-zones**: Allowed arguments: describe, list
- **dns record-sets**: Allowed arguments: describe, list
- **endpoints**: Allowed arguments: describe, list
- **essential-contacts**: Allowed arguments: compute, list
- **eventarc**: Allowed arguments: channels, providers, triggers
- **filestore**: Allowed arguments: backups, instances, locations, operations
- **firestore**: Allowed arguments: databases, indexes, operations
- **functions**: Allowed arguments: describe, list
- **healthcare**: Allowed arguments: datasets, dicom-stores, fhir-stores, hl7v2-stores, operations
- **iam roles**: Allowed arguments: describe, list
- **iam service-accounts**: Allowed arguments: describe, get-iam-policy, list
- **identity**: Allowed arguments: groups
- **info**: Flags: --anonymize, --help, --run-diagnostics, -h
- **kms**: Allowed arguments: keys, keyrings, locations
- **logging logs**: Allowed arguments: describe, list
- **logging read**: Positional args accepted
- **memcache**: Allowed arguments: instances, operations, regions
- **monitoring**: Allowed arguments: channels, dashboards, policies, snoozes
- **network-management**: Allowed arguments: connectivity-tests, operations
- **network-services**: Allowed arguments: endpoints, gateways, grpc-routes, http-routes, meshes
- **notebooks**: Allowed arguments: environments, instances, locations
- **organizations**: Allowed arguments: describe, list
- **policy-intelligence**: Allowed arguments: lint-condition, query-activity, troubleshoot-policy
- **projects**: Allowed arguments: describe, get-iam-policy, list
- **pubsub**: Allowed arguments: subscriptions, topics, snapshots, schemas
- **recaptcha**: Allowed arguments: keys
- **recommender**: Allowed arguments: insights, recommendations
- **redis**: Allowed arguments: instances, operations, regions
- **resource-manager**: Allowed arguments: folders, liens, operations, org-policies
- **run services**: Allowed arguments: describe, list
- **scc**: Allowed arguments: assets, findings, notifications, operations, sources
- **scheduler**: Allowed arguments: jobs
- **secrets**: Allowed arguments: describe, list, versions
- **service-directory**: Allowed arguments: endpoints, namespaces, services
- **services**: Allowed arguments: list
- **source**: Allowed arguments: repos
- **spanner**: Allowed arguments: databases, instances, operations
- **sql databases**: Allowed arguments: describe, list
- **sql instances**: Allowed arguments: describe, list
- **sql operations**: Allowed arguments: describe, list
- **storage**: Allowed arguments: buckets, cp, ls, cat, objects
- **tasks**: Allowed arguments: describe, list, locations, queues
- **transfer**: Allowed arguments: agents, jobs, operations
- **version**: Positional args accepted
- **vmware**: Allowed arguments: clusters, dns-bind-permission, external-addresses, hcx-activation-keys, locations, networks, node-types, operations, private-clouds, subnets
- **workflows**: Allowed arguments: describe, executions, list
- Allowed standalone flags: --help, -h, --version

### `gem` (https://guides.rubygems.org/command-reference/)

- **contents**: Flags: --all, --help, --local, --prerelease, --remote, --versions, -a, -h, -i, -l, -r. Valued: --version, -v
- **dependency**: Flags: --all, --help, --local, --prerelease, --remote, --versions, -a, -h, -i, -l, -r. Valued: --version, -v
- **environment**: Flags: --all, --help, --local, --prerelease, --remote, --versions, -a, -h, -i, -l, -r. Valued: --version, -v
- **help**: Flags: --all, --help, --local, --prerelease, --remote, --versions, -a, -h, -i, -l, -r. Valued: --version, -v
- **info**: Flags: --help, --installed, --prerelease, -h, -i. Valued: --version, -v
- **list**: Flags: --all, --help, --installed, --local, --no-details, --no-versions, --prerelease, --remote, --versions, -a, -d, -h, -i, -l, -r
- **outdated**: Flags: --all, --help, --local, --prerelease, --remote, --versions, -a, -h, -i, -l, -r. Valued: --version, -v
- **pristine**: Flags: --all, --help, --local, --prerelease, --remote, --versions, -a, -h, -i, -l, -r. Valued: --version, -v
- **search**: Flags: --all, --details, --exact, --help, --local, --prerelease, --remote, --versions, -a, -d, -e, -h, -i, -l, -r
- **sources**: Flags: --all, --help, --local, --prerelease, --remote, --versions, -a, -h, -i, -l, -r. Valued: --version, -v
- **specification**: Flags: --all, --help, --local, --prerelease, --remote, --versions, -a, -h, -i, -l, -r. Valued: --version, -v
- **stale**: Flags: --all, --help, --local, --prerelease, --remote, --versions, -a, -h, -i, -l, -r. Valued: --version, -v
- **which**: Flags: --all, --help, --local, --prerelease, --remote, --versions, -a, -h, -i, -l, -r. Valued: --version, -v
- Allowed standalone flags: --help, --version, -V, -h

### `getconf` (https://man7.org/linux/man-pages/man1/getconf.1.html)

- Allowed standalone flags: --help, --version, -V, -a, -h
- Allowed valued flags: -v
- Bare invocation allowed

### `gh` (https://cli.github.com/manual/)

- Subcommands alias, attestation, cache, codespace, config, extension, gist, gpg-key, issue, label, org, pr, project, release, repo, ruleset, run, secret, ssh-key, variable, workflow are allowed with actions: checks, diff, list, status, verify, view, watch.
- Always safe: --version, search, status.
- auth status, browse (requires --no-browser), run rerun (SafeWrite), release download (requires --output), api (read-only: implicit GET or explicit -X GET, with --paginate, --slurp, --jq, --template, --cache, --preview, --include, --silent, --verbose, --hostname, -H for Accept and X-GitHub-Api-Version headers).

### `git` (https://git-scm.com/docs)

- **blame**: Flags: --color-by-age, --color-lines, --help, --incremental, --line-porcelain, --minimal, --porcelain, --progress, --root, --show-email, --show-name, --show-number, --show-stats, -b, -c, -e, -f, -h, -k, -l, -n, -p, -s, -t, -w. Valued: --abbrev, --contents, --ignore-rev, --ignore-revs-file, -C, -L, -M, -S
- **branch**: Flags: --all, --help, --ignore-case, --list, --no-abbrev, --no-color, --no-column, --omit-empty, --remotes, --show-current, --verbose, -a, -h, -i, -l, -r, -v, -vv. Valued: --abbrev, --color, --column, --contains, --format, --merged, --no-contains, --no-merged, --points-at, --sort
- **cat-file**: Flags: --batch-all-objects, --buffer, --filters, --follow-symlinks, --help, --mailmap, --textconv, --unordered, --use-mailmap, -Z, -e, -h, -p, -s, -t. Valued: --batch, --batch-check, --batch-command, --filter, --path
- **check-ignore**: Flags: --help, --no-index, --non-matching, --quiet, --stdin, --verbose, -h, -n, -q, -v, -z
- **config --get**
- **config --get-all**
- **config --get-regexp**
- **config --help**
- **config --list**
- **config -h**
- **config -l**
- **config**: Flags: --global, --local, --name-only, --show-origin, --show-scope, --system, --worktree, -z. Valued: --blob, --file, -f
- **count-objects**: Flags: --help, --human-readable, --verbose, -H, -h, -v
- **describe**: Flags: --all, --always, --contains, --debug, --exact-match, --first-parent, --help, --long, --tags, -h. Valued: --abbrev, --broken, --candidates, --dirty, --exclude, --match
- **diff**: Flags: --cached, --check, --compact-summary, --cumulative, --dirstat-by-file, --exit-code, --find-copies-harder, --full-index, --help, --ignore-all-space, --ignore-blank-lines, --ignore-cr-at-eol, --ignore-space-at-eol, --ignore-space-change, --merge-base, --minimal, --name-only, --name-status, --no-color, --no-ext-diff, --no-index, --no-patch, --no-prefix, --no-renames, --numstat, --patch, --patch-with-raw, --patch-with-stat, --patience, --pickaxe-all, --raw, --shortstat, --staged, --stat, --summary, --text, -B, -C, -M, -R, -a, -b, -h, -p, -u, -w, -z. Valued: --abbrev, --color, --diff-algorithm, --diff-filter, --dirstat, --dst-prefix, --inter-hunk-context, --line-prefix, --output-indicator-new, --output-indicator-old, --relative, --src-prefix, --stat-width, --unified, --word-diff, --word-diff-regex, -G, -O, -S, -U
- **diff-tree**: Flags: --cc, --combined-all-paths, --find-copies-harder, --full-index, --help, --ignore-all-space, --ignore-space-at-eol, --ignore-space-change, --merge-base, --minimal, --name-only, --name-status, --no-commit-id, --no-ext-diff, --no-patch, --no-renames, --numstat, --patch, --patch-with-raw, --patch-with-stat, --pickaxe-all, --raw, --root, --shortstat, --stat, --stdin, --summary, --text, -B, -C, -M, -R, -a, -c, -h, -m, -p, -r, -s, -t, -u, -v, -z. Valued: --abbrev, --diff-algorithm, --diff-filter, --pretty, -O, -S
- **fetch**: Flags: --all, --append, --atomic, --dry-run, --force, --help, --ipv4, --ipv6, --keep, --multiple, --negotiate-only, --no-auto-gc, --no-auto-maintenance, --no-show-forced-updates, --no-tags, --no-write-fetch-head, --porcelain, --prefetch, --progress, --prune, --prune-tags, --quiet, --refetch, --set-upstream, --show-forced-updates, --stdin, --tags, --unshallow, --update-head-ok, --update-shallow, --verbose, --write-commit-graph, --write-fetch-head, -4, -6, -P, -a, -f, -h, -k, -m, -n, -p, -q, -t, -u, -v. Valued: --deepen, --depth, --filter, --jobs, --negotiation-tip, --recurse-submodules, --refmap, --server-option, --shallow-exclude, --shallow-since, -j, -o
- **for-each-ref**: Flags: --help, --ignore-case, --include-root-refs, --omit-empty, --perl, --python, --shell, --stdin, --tcl, -h, -p, -s. Valued: --color, --contains, --count, --exclude, --format, --merged, --no-contains, --no-merged, --points-at, --sort
- **grep**: Flags: --all-match, --and, --basic-regexp, --break, --cached, --column, --count, --exclude-standard, --extended-regexp, --files-with-matches, --files-without-match, --fixed-strings, --full-name, --function-context, --heading, --help, --ignore-case, --index, --invert-match, --line-number, --name-only, --no-color, --no-index, --null, --only-matching, --perl-regexp, --quiet, --recurse-submodules, --recursive, --show-function, --text, --textconv, --untracked, --word-regexp, -E, -F, -G, -H, -I, -L, -P, -W, -a, -c, -h, -i, -l, -n, -o, -p, -q, -r, -v, -w, -z. Valued: --after-context, --before-context, --color, --context, --max-count, --max-depth, --open-files-in-pager, --threads, -A, -B, -C, -O, -e, -f, -m
- **help**: Positional args accepted
- **log**: Flags: --abbrev-commit, --all, --ancestry-path, --author-date-order, --bisect, --boundary, --branches, --cherry, --cherry-mark, --cherry-pick, --children, --clear-decorations, --compact-summary, --cumulative, --date-order, --dense, --do-walk, --early-output, --first-parent, --follow, --full-diff, --full-history, --graph, --help, --ignore-missing, --invert-grep, --left-only, --left-right, --log-size, --mailmap, --merges, --minimal, --name-only, --name-status, --no-abbrev-commit, --no-color, --no-decorate, --no-expand-tabs, --no-ext-diff, --no-merges, --no-notes, --no-patch, --no-prefix, --no-renames, --no-walk, --numstat, --oneline, --parents, --patch, --patch-with-raw, --patch-with-stat, --patience, --raw, --reflog, --regexp-ignore-case, --relative-date, --remotes, --reverse, --shortstat, --show-linear-break, --show-notes, --show-pulls, --show-signature, --simplify-by-decoration, --simplify-merges, --source, --sparse, --stat, --stdin, --summary, --tags, --text, --topo-order, --use-mailmap, -0, -1, -2, -3, -4, -5, -6, -7, -8, -9, -h, -i, -p, -q, -u. Valued: --abbrev, --after, --author, --before, --color, --committer, --date, --decorate, --decorate-refs, --decorate-refs-exclude, --diff-algorithm, --diff-filter, --encoding, --exclude, --format, --glob, --grep, --max-count, --max-parents, --min-parents, --pretty, --since, --skip, --until, -L, -n
- **ls-files**: Flags: --cached, --debug, --deduplicate, --deleted, --directory, --empty-directory, --eol, --error-unmatch, --exclude-standard, --full-name, --help, --ignored, --killed, --modified, --no-empty-directory, --others, --recurse-submodules, --resolve-undo, --sparse, --stage, --unmerged, -c, -d, -f, -h, -i, -k, -m, -o, -r, -s, -t, -u, -v, -z. Valued: --abbrev, --exclude, --exclude-from, --exclude-per-directory, --format, --with-tree, -X, -x
- **ls-remote**: Flags: --branches, --exit-code, --get-url, --help, --quiet, --refs, --symref, --tags, -b, -h, -q, -t. Valued: --server-option, --sort, -o
- **ls-tree**: Flags: --full-name, --full-tree, --help, --long, --name-only, --name-status, --object-only, -d, -h, -l, -r, -t, -z. Valued: --abbrev, --format
- **merge-base**: Flags: --all, --fork-point, --help, --independent, --is-ancestor, --octopus, -a, -h
- **merge-tree**: Flags: --allow-unrelated-histories, --help, --messages, --name-only, --quiet, --stdin, --trivial-merge, --write-tree, -h, -z. Valued: --merge-base, -X
- **name-rev**: Flags: --all, --always, --annotate-stdin, --help, --name-only, --tags, --undefined, -h. Valued: --exclude, --refs
- **notes --help**
- **notes -h**
- **notes list**
- **notes show**
- **reflog**: Flags: --abbrev-commit, --all, --ancestry-path, --author-date-order, --bisect, --boundary, --branches, --cherry, --cherry-mark, --cherry-pick, --children, --clear-decorations, --compact-summary, --cumulative, --date-order, --dense, --do-walk, --early-output, --first-parent, --follow, --full-diff, --full-history, --graph, --help, --ignore-missing, --invert-grep, --left-only, --left-right, --log-size, --mailmap, --merges, --minimal, --name-only, --name-status, --no-abbrev-commit, --no-color, --no-decorate, --no-expand-tabs, --no-ext-diff, --no-merges, --no-notes, --no-patch, --no-prefix, --no-renames, --no-walk, --numstat, --oneline, --parents, --patch, --patch-with-raw, --patch-with-stat, --patience, --raw, --reflog, --regexp-ignore-case, --relative-date, --remotes, --reverse, --shortstat, --show-linear-break, --show-notes, --show-pulls, --show-signature, --simplify-by-decoration, --simplify-merges, --source, --sparse, --stat, --stdin, --summary, --tags, --text, --topo-order, --use-mailmap, -0, -1, -2, -3, -4, -5, -6, -7, -8, -9, -h, -i, -p, -q, -u. Valued: --abbrev, --after, --author, --before, --color, --committer, --date, --decorate, --decorate-refs, --decorate-refs-exclude, --diff-algorithm, --diff-filter, --encoding, --exclude, --format, --glob, --grep, --max-count, --max-parents, --min-parents, --pretty, --since, --skip, --until, -L, -n
- **rev-parse**: Flags: --absolute-git-dir, --all, --branches, --git-common-dir, --git-dir, --git-path, --help, --is-bare-repository, --is-inside-git-dir, --is-inside-work-tree, --is-shallow-repository, --local-env-vars, --quiet, --remotes, --shared-index-path, --show-cdup, --show-prefix, --show-superproject-working-tree, --show-toplevel, --symbolic, --symbolic-full-name, --tags, --verify, -h, -q. Valued: --abbrev-ref, --after, --before, --default, --exclude, --glob, --prefix, --resolve-git-dir, --short, --since, --until. Positional args accepted
- **shortlog**: Flags: --committer, --email, --help, --numbered, --summary, -c, -e, -h, -n, -s. Valued: --format, --group
- **show**: Flags: --abbrev-commit, --compact-summary, --cumulative, --expand-tabs, --full-index, --help, --ignore-all-space, --ignore-blank-lines, --ignore-space-at-eol, --ignore-space-change, --mailmap, --minimal, --name-only, --name-status, --no-color, --no-ext-diff, --no-notes, --no-patch, --no-prefix, --no-renames, --numstat, --patch, --patch-with-raw, --patch-with-stat, --patience, --raw, --shortstat, --show-notes, --show-signature, --source, --stat, --summary, --text, --use-mailmap, -h, -p, -q, -u, -w. Valued: --abbrev, --color, --decorate, --decorate-refs, --decorate-refs-exclude, --diff-algorithm, --diff-filter, --encoding, --format, --notes, --pretty, -O
- **stash --help**: Positional args accepted
- **stash -h**: Positional args accepted
- **stash list**: Positional args accepted
- **stash show**: Flags: --help, --patch, --stat, -h, -p, -u. Positional args accepted
- **status**: Flags: --ahead-behind, --branch, --help, --ignore-submodules, --long, --no-ahead-behind, --no-renames, --null, --renames, --short, --show-stash, --verbose, -b, -h, -s, -v, -z. Valued: --column, --find-renames, --ignored, --porcelain, --untracked-files, -M, -u
- **tag**: Flags: --help, --list, --no-color, --no-column, --verify, -h, -l, -v. Valued: --color, --column, --contains, --format, --merged, --no-contains, --no-merged, --points-at, --sort, -n
- **verify-commit**: Flags: --help, --raw, --verbose, -h, -v
- **verify-tag**: Flags: --help, --raw, --verbose, -h, -v. Valued: --format
- **worktree --help**
- **worktree -h**
- **worktree list**: Flags: --porcelain, --verbose, -v, -z
- Allowed standalone flags: --help, --version, -V, -h

### `git-lfs` (https://git-lfs.com/)

- **env**: Flags: --help, -h
- **locks**: Flags: --help, --json, --local, --verify, -h, -l, -v. Valued: --id, --limit, --path
- **ls-files**: Flags: --all, --deleted, --help, --long, --name-only, --size, -a, -d, -h, -l, -n, -s. Valued: --include, --exclude, -I, -X
- **status**: Flags: --help, --json, --porcelain, -h
- **version**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -h

### `gitleaks` (https://github.com/gitleaks/gitleaks)

- **detect**: Flags: --help, --no-banner, --no-color, --redact, --verbose, -h, -v. Valued: --baseline-path, --config, --exit-code, --gitleaks-ignore-path, --log-level, --log-opts, --max-target-megabytes, --report-format, --report-path, --source, -c, -l, -r, -s
- **protect**: Flags: --help, --no-banner, --no-color, --redact, --staged, --verbose, -h, -v. Valued: --config, --exit-code, --gitleaks-ignore-path, --log-level, --max-target-megabytes, --report-format, --report-path, --source, -c, -l, -r, -s
- **version**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -h

### `glab` (https://glab.readthedocs.io/en/latest/)

- Subcommands ci, cluster, deploy-key, gpg-key, incident, issue, iteration, label, milestone, mr, release, repo, schedule, snippet, ssh-key, stack, variable are allowed with actions: diff, issues, list, status, view.
- Always safe: --version, -v, check-update, version.
- auth status, api (GET only).

### `go` (https://pkg.go.dev/cmd/go)

- **build**: Flags: --help, -a, -asan, -cover, -h, -linkshared, -modcacherw, -msan, -n, -race, -trimpath, -v, -work, -x. Valued: -asmflags, -buildmode, -buildvcs, -compiler, -covermode, -coverpkg, -gccgoflags, -gcflags, -installsuffix, -ldflags, -mod, -modfile, -o, -overlay, -p, -pgo, -pkgdir, -tags
- **doc**: Flags: --help, -all, -c, -cmd, -h, -short, -src, -u
- **env**: Flags: --help, -h, -json
- **help**: Positional args accepted
- **list**: Flags: --help, -a, -asan, -compiled, -cover, -deps, -e, -export, -find, -h, -linkshared, -m, -modcacherw, -msan, -n, -race, -retract, -test, -trimpath, -u, -v, -versions, -work, -x. Valued: -asmflags, -buildmode, -buildvcs, -compiler, -covermode, -coverpkg, -f, -gccgoflags, -gcflags, -installsuffix, -json, -ldflags, -mod, -modfile, -overlay, -p, -pgo, -pkgdir, -reuse, -tags
- **test**: Flags: --help, -a, -asan, -benchmem, -cover, -failfast, -h, -json, -linkshared, -modcacherw, -msan, -n, -race, -short, -trimpath, -v, -work, -x. Valued: -asmflags, -bench, -benchtime, -blockprofile, -blockprofilerate, -buildmode, -buildvcs, -compiler, -count, -covermode, -coverpkg, -coverprofile, -cpu, -cpuprofile, -fuzz, -fuzzminimizetime, -fuzztime, -gccgoflags, -gcflags, -installsuffix, -ldflags, -list, -memprofile, -memprofilerate, -mod, -modfile, -mutexprofile, -mutexprofilefraction, -o, -outputdir, -overlay, -p, -parallel, -pgo, -pkgdir, -run, -shuffle, -skip, -tags, -timeout, -trace
- **version**: Flags: --help, -h, -m, -v
- **vet**: Flags: --help, -a, -asan, -cover, -h, -json, -linkshared, -modcacherw, -msan, -n, -race, -trimpath, -v, -work, -x. Valued: -asmflags, -buildmode, -buildvcs, -c, -compiler, -covermode, -coverpkg, -gccgoflags, -gcflags, -installsuffix, -ldflags, -mod, -modfile, -overlay, -p, -pgo, -pkgdir, -tags
- Allowed standalone flags: --help, --version, -V, -h

### `gojq` (https://github.com/itchyny/gojq)

- Allowed standalone flags: --color-output, --compact-output, --exit-status, --help, --join-output, --monochrome-output, --null-input, --raw-input, --raw-output, --raw-output0, --slurp, --sort-keys, --tab, --version, --yaml-input, --yaml-output, -C, -M, -R, -S, -V, -c, -e, -h, -j, -n, -r, -s
- Allowed valued flags: --arg, --argjson, --args, --from-file, --indent, --jsonargs, --rawfile, --slurpfile, -f
- Bare invocation allowed

### `golangci-lint` (https://golangci-lint.run/)

- **help**: Positional args accepted
- **linters**: Flags: --help, -h
- **run**: Flags: --allow-parallel-runners, --help, --json, --new, --no-config, --print-issued-lines, --print-linter-name, --show-stats, --verbose, -h, -v. Valued: --build-tags, --color, --concurrency, --config, --disable, --enable, --exclude, --go, --max-issues-per-linter, --max-same-issues, --out-format, --path-prefix, --skip-dirs, --skip-files, --sort-results, --timeout, -D, -E, -c, -e, -p
- **version**: Flags: --help, --format, -h
- Allowed standalone flags: --help, --version, -h

### `govulncheck` (https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck)

- Allowed standalone flags: --help, --json, --version, -h
- Allowed valued flags: -C, -db, -mode, -show, -tags, -test

### `gradle` (https://docs.gradle.org/current/userguide/command_line_interface.html)

Aliases: `gradlew`

- **build**: Flags: --build-cache, --configure-on-demand, --console, --continue, --dry-run, --help, --info, --no-build-cache, --no-daemon, --no-parallel, --no-rebuild, --parallel, --profile, --quiet, --rerun-tasks, --scan, --stacktrace, --warning-mode, -h, -q. Valued: --exclude-task, --max-workers, -x
- **check**: Flags: --build-cache, --configure-on-demand, --console, --continue, --dry-run, --help, --info, --no-build-cache, --no-daemon, --no-parallel, --no-rebuild, --parallel, --profile, --quiet, --rerun-tasks, --scan, --stacktrace, --warning-mode, -h, -q. Valued: --exclude-task, --max-workers, -x
- **dependencies**: Flags: --console, --help, --info, --no-rebuild, --quiet, --stacktrace, --warning-mode, -h, -q. Valued: --configuration
- **properties**: Flags: --console, --help, --info, --no-rebuild, --quiet, --stacktrace, --warning-mode, -h, -q
- **tasks**: Flags: --all, --console, --help, --info, --no-rebuild, --quiet, --stacktrace, --warning-mode, -h, -q. Valued: --group
- **test**: Flags: --build-cache, --configure-on-demand, --console, --continue, --dry-run, --help, --info, --no-build-cache, --no-daemon, --no-parallel, --no-rebuild, --parallel, --profile, --quiet, --rerun-tasks, --scan, --stacktrace, --warning-mode, -h, -q. Valued: --exclude-task, --max-workers, -x
- Allowed standalone flags: --help, --version, -V, -h

### `grep` (https://www.gnu.org/software/grep/manual/grep.html)

Aliases: `egrep`, `fgrep`

- Allowed standalone flags: --basic-regexp, --binary, --byte-offset, --color, --colour, --count, --dereference-recursive, --extended-regexp, --files-with-matches, --files-without-match, --fixed-strings, --help, --ignore-case, --initial-tab, --invert-match, --line-buffered, --line-number, --line-regexp, --no-filename, --no-messages, --null, --null-data, --only-matching, --perl-regexp, --quiet, --recursive, --silent, --text, --version, --with-filename, --word-regexp, -E, -F, -G, -H, -I, -J, -L, -P, -R, -S, -T, -U, -V, -Z, -a, -b, -c, -h, -i, -l, -n, -o, -p, -q, -r, -s, -v, -w, -x, -z
- Allowed valued flags: --after-context, --before-context, --binary-files, --color, --colour, --context, --devices, --directories, --exclude, --exclude-dir, --exclude-from, --file, --group-separator, --include, --label, --max-count, --regexp, -A, -B, -C, -D, -d, -e, -f, -m

### `gron` (https://github.com/tomnomnom/gron)

- Allowed standalone flags: --help, --json, --monochrome, --no-sort, --stream, --ungron, --values, --version, -c, -j, -k, -m, -s, -u, -v
- Bare invocation allowed

### `groups` (https://www.gnu.org/software/coreutils/manual/coreutils.html#groups-invocation)

- Allowed standalone flags: --help, --version, -V, -h
- Bare invocation allowed

### `grype` (https://github.com/anchore/grype)

- Allowed standalone flags: --add-cpes-if-none, --by-cve, --help, --only-fixed, --only-notfixed, --quiet, --verbose, --version, -h, -q, -v
- Allowed valued flags: --config, --distro, --exclude, --fail-on, --file, --key, --name, --output, --platform, --scope, -c, -o
- Hyphen-prefixed positional arguments accepted

### `gzip` (https://man7.org/linux/man-pages/man1/gzip.1.html)

- Requires -l, --list, -t, --test. - Allowed standalone flags: -l, --list, -t, --test, -v, --verbose, --help, -h, --version, -V

### `hash` (https://man7.org/linux/man-pages/man1/hash.1p.html)

- Allowed standalone flags: -d, -l, -r, -t
- Allowed valued flags: -p
- Bare invocation allowed
- Hyphen-prefixed positional arguments accepted

### `hcloud` (https://github.com/hetznercloud/cli)

- **certificate describe**: Flags: --help, -h. Valued: --output, -o
- **certificate list**: Flags: --help, -h. Valued: --output, --selector, -l, -o
- **context active**: Flags: --help, -h
- **context list**: Flags: --help, -h
- **datacenter describe**: Flags: --help, -h. Valued: --output, -o
- **datacenter list**: Flags: --help, -h. Valued: --output, -o
- **firewall describe**: Flags: --help, -h. Valued: --output, -o
- **firewall list**: Flags: --help, -h. Valued: --output, --selector, -l, -o
- **floating-ip describe**: Flags: --help, -h. Valued: --output, -o
- **floating-ip list**: Flags: --help, -h. Valued: --output, --selector, -l, -o
- **image describe**: Flags: --help, -h. Valued: --output, -o
- **image list**: Flags: --help, -h. Valued: --output, --selector, --type, -l, -o
- **load-balancer describe**: Flags: --help, -h. Valued: --output, -o
- **load-balancer list**: Flags: --help, -h. Valued: --output, --selector, -l, -o
- **location describe**: Flags: --help, -h. Valued: --output, -o
- **location list**: Flags: --help, -h. Valued: --output, -o
- **network describe**: Flags: --help, -h. Valued: --output, -o
- **network list**: Flags: --help, -h. Valued: --output, --selector, -l, -o
- **placement-group describe**: Flags: --help, -h. Valued: --output, -o
- **placement-group list**: Flags: --help, -h. Valued: --output, --selector, -l, -o
- **primary-ip describe**: Flags: --help, -h. Valued: --output, -o
- **primary-ip list**: Flags: --help, -h. Valued: --output, --selector, -l, -o
- **server describe**: Flags: --help, -h. Valued: --output, -o
- **server list**: Flags: --help, -h. Valued: --output, --selector, -l, -o
- **server-type describe**: Flags: --help, -h. Valued: --output, -o
- **server-type list**: Flags: --help, -h. Valued: --output, -o
- **ssh-key describe**: Flags: --help, -h. Valued: --output, -o
- **ssh-key list**: Flags: --help, -h. Valued: --output, --selector, -l, -o
- **version**
- **volume describe**: Flags: --help, -h. Valued: --output, -o
- **volume list**: Flags: --help, -h. Valued: --output, --selector, -l, -o
- Allowed standalone flags: --help, --version, -h, -v

### `head` (https://www.gnu.org/software/coreutils/manual/coreutils.html#head-invocation)

- Allowed standalone flags: -0, -1, -2, -3, -4, -5, -6, -7, -8, -9, -V, -h, -q, -v, -z, --help, --quiet, --silent, --verbose, --version, --zero-terminated
- Allowed valued flags: -c, -n, --bytes, --lines
- Bare invocation allowed

### `helm` (https://helm.sh/docs/helm/)

- **env**: Flags: --help, -h
- **get all**: Flags: --help, -h. Valued: --output, --revision, --template, -o
- **get hooks**: Flags: --help, -h. Valued: --output, --revision, -o
- **get manifest**: Flags: --help, -h. Valued: --output, --revision, -o
- **get metadata**: Flags: --help, -h. Valued: --output, --revision, -o
- **get notes**: Flags: --help, -h. Valued: --output, --revision, -o
- **get values**: Flags: --help, -h. Valued: --output, --revision, -o
- **history**: Flags: --help, -h. Valued: --max, --output, -o
- **lint**: Flags: --help, --quiet, --strict, --with-subcharts, -h. Valued: --set, --set-file, --set-json, --set-string, --values, -f
- **list**: Flags: --all, --all-namespaces, --deployed, --failed, --help, --pending, --reverse, --short, --superseded, --uninstalled, --uninstalling, -A, -a, -h, -q. Valued: --filter, --max, --offset, --output, --time-format, -o
- **search hub**: Flags: --help, --list-repo-url, -h. Valued: --max-col-width, --output, -o
- **search repo**: Flags: --devel, --help, --regexp, --versions, -h, -l, -r. Valued: --max-col-width, --output, --version, -o
- **show all**: Flags: --devel, --help, -h. Valued: --ca-file, --cert-file, --key-file, --keyring, --repo, --username, --version
- **show chart**: Flags: --devel, --help, -h. Valued: --repo, --version
- **show crds**: Flags: --devel, --help, -h. Valued: --repo, --version
- **show readme**: Flags: --devel, --help, -h. Valued: --repo, --version
- **show values**: Flags: --devel, --help, -h. Valued: --jsonpath, --repo, --version
- **status**: Flags: --help, --show-desc, --show-resources, -h. Valued: --output, --revision, -o
- **template**: Flags: --api-versions, --create-namespace, --dependency-update, --devel, --dry-run, --generate-name, --help, --include-crds, --is-upgrade, --no-hooks, --release-name, --replace, --skip-crds, --skip-tests, --validate, -g, -h. Valued: --kube-version, --name-template, --namespace, --output-dir, --post-renderer, --repo, --set, --set-file, --set-json, --set-string, --show-only, --timeout, --values, --version, -f, -n, -s
- **verify**: Flags: --help, -h. Valued: --keyring
- **version**: Flags: --help, --short, --template, -h
- Allowed standalone flags: --help, -h

### `heroku` (https://devcenter.heroku.com/articles/heroku-cli-commands)

- **addons**: Flags: --all, --help, --json, -A, -h. Valued: --app, -a
- **apps**: Flags: --all, --help, --json, -a, -h. Valued: --space, --team, -s, -t
- **apps:info**: Flags: --help, --json, --shell, -h, -s. Valued: --app, -a
- **buildpacks**: Flags: --help, -h. Valued: --app, -a
- **config**: Flags: --help, --json, --shell, -h, -j, -s. Valued: --app, -a
- **logs**: Flags: --force-colors, --help, --tail, -h, -t. Valued: --app, --dyno, --num, --source, -a, -d, -n, -s
- **ps**: Flags: --help, --json, -h, -j. Valued: --app, -a
- **regions**: Flags: --help, --json, -h
- **releases**: Flags: --help, --json, -h, -j. Valued: --app, --num, -a, -n
- **status**: Flags: --help, --json, -h
- Allowed standalone flags: --help, --version, -V, -h

### `hexdump` (https://man7.org/linux/man-pages/man1/hexdump.1.html)

- Allowed standalone flags: -C, -V, -b, -c, -d, -h, -o, -v, -x, --help, --version
- Allowed valued flags: -L, -e, -f, -n, -s
- Bare invocation allowed

### `hf` (https://huggingface.co/docs/huggingface_hub/guides/cli)

- **cache ls**: Flags: --help, -h
- **cache verify**: Flags: --help, -h
- **collections info**: Flags: --help, -h
- **collections ls**: Flags: --help, -h. Valued: --limit, --owner
- **datasets info**: Flags: --help, -h
- **datasets ls**: Flags: --help, -h. Valued: --author, --filter, --limit, --search, --sort
- **datasets parquet**: Flags: --help, -h
- **discussions diff**: Flags: --help, -h
- **discussions info**: Flags: --help, -h
- **discussions list**: Flags: --help, -h
- **env**: Flags: --help, -h
- **jobs logs**: Flags: --help, -h. Valued: --tail
- **jobs ps**: Flags: --help, -h
- **models info**: Flags: --help, -h
- **models ls**: Flags: --help, -h. Valued: --author, --filter, --limit, --search, --sort
- **spaces info**: Flags: --help, -h
- **spaces ls**: Flags: --help, -h. Valued: --author, --filter, --limit, --search, --sort
- **version**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -V, -h

### `host` (https://man7.org/linux/man-pages/man1/host.1.html)

- Allowed standalone flags: --help, --version, -4, -6, -C, -V, -a, -c, -d, -h, -l, -r, -s, -v
- Allowed valued flags: -D, -N, -R, -T, -W, -i, -m, -t

### `hostname` (https://man7.org/linux/man-pages/man1/hostname.1.html)

- Allowed standalone flags: --help, --version, -A, -I, -V, -d, -f, -h, -i, -s
- Bare invocation allowed

### `htmlq` (https://github.com/mgdm/htmlq)

- Allowed standalone flags: --detect-base, --help, --ignore-whitespace, --pretty, --remove-nodes, --text, --version, -B, -V, -h, -p, -t, -w
- Allowed valued flags: --attribute, --base, --filename, --output, -a, -b, -f, -o

### `htop` (https://htop.dev/)

- Allowed standalone flags: --help, --no-color, --no-mouse, --no-unicode, --tree, --version, -C, -H, -M, -V, -h, -t
- Allowed valued flags: --delay, --filter, --highlight-changes, --pid, --sort-key, --user, -F, -d, -p, -s, -u
- Bare invocation allowed

### `hyperfine` (https://github.com/sharkdp/hyperfine#readme)

- Recursively validates each benchmarked command.

### `iconv` (https://man7.org/linux/man-pages/man1/iconv.1.html)

- Allowed standalone flags: -V, -c, -h, -l, -s, --help, --list, --silent, --version
- Allowed valued flags: -f, -t, --from-code, --to-code

### `id` (https://www.gnu.org/software/coreutils/manual/coreutils.html#id-invocation)

- Allowed standalone flags: --context, --group, --groups, --help, --name, --real, --user, --version, --zero, -G, -V, -Z, -g, -h, -n, -p, -r, -u, -z
- Bare invocation allowed

### `identify` (https://imagemagick.org/script/identify.php)

- Allowed standalone flags: --help, --verbose, --version, -V, -h, -ping, -quiet, -regard-warnings, -verbose
- Allowed valued flags: -channel, -define, -density, -depth, -features, -format, -fuzz, -interlace, -limit, -list, -log, -moments, -monitor, -precision, -seed, -set, -size, -strip, -unique, -virtual-pixel

### `ifconfig` (https://man7.org/linux/man-pages/man8/ifconfig.8.html)

- Allowed standalone flags: --help, --version, -L, -V, -a, -h, -l, -s, -v
- Bare invocation allowed

### `importmap` (https://github.com/rails/importmap-rails)

- **audit**: Flags: --help, -h
- **json**: Flags: --help, -h
- **outdated**: Flags: --help, -h
- **packages**: Flags: --help, -h
- Allowed standalone flags: --help, -h

### `ioreg` (https://ss64.com/mac/ioreg.html)

- Allowed standalone flags: --help, --version, -S, -V, -a, -b, -f, -h, -i, -l, -r, -t, -x
- Allowed valued flags: -c, -d, -k, -n, -p, -w
- Bare invocation allowed

### `iotop` (https://man7.org/linux/man-pages/man8/iotop.8.html)

- Allowed standalone flags: --accumulated, --batch, --help, --kilobytes, --only, --processes, --quiet, --version, -P, -V, -a, -b, -h, -k, -o, -q, -t
- Allowed valued flags: --delay, --iter, --pid, --user, -d, -n, -p, -u
- Bare invocation allowed

### `isort` (https://pycqa.github.io/isort/docs/configuration/options.html)

- Requires --check-only, --diff, -c. - Allowed standalone flags: --check-only, --diff, --help, --quiet, --show-config, --verbose, --version, -c, -V, -h, -q, -v
- Allowed valued flags: --filter-files, --line-length, --multi-line, --profile, --project, --settings-file, --skip, --skip-glob, --src, -l, -m

### `jaq` (https://github.com/01mf02/jaq)

- Allowed standalone flags: --compact-output, --exit-status, --help, --join-output, --null-input, --raw-input, --raw-output, --slurp, --sort-keys, --tab, --version, -C, -M, -R, -S, -V, -c, -e, -h, -j, -n, -r, -s
- Allowed valued flags: --arg, --argjson, --from-file, --indent, --rawfile, --slurpfile, -f
- Bare invocation allowed

### `jar` (https://docs.oracle.com/en/java/javase/21/docs/specs/man/jar.html)

- List mode only: tf, tvf, --list, -t. Also --version, --help.

### `jarsigner` (https://docs.oracle.com/en/java/javase/21/docs/specs/man/jarsigner.html)

- Requires -verify. - Allowed standalone flags: -certs, -strict, -verbose, -verify, -help, -h

### `java` (https://docs.oracle.com/en/java/javase/21/docs/specs/man/java.html)

- Allowed standalone flags: --help, --version, -h, -version

### `javap` (https://docs.oracle.com/en/java/javase/21/docs/specs/man/javap.html)

- Allowed standalone flags: --help, --version, -V, -c, -constants, -h, -l, -p, -private, -protected, -public, -s, -sysinfo, -v, -verbose
- Allowed valued flags: --module, -bootclasspath, -classpath, -cp, -m

### `jc` (https://kellyjonbrazil.github.io/jc/)

- Allowed standalone flags: --about, --bash-comp, --force-color, --help, --meta-out, --monochrome, --pretty, --quiet, --raw, --unbuffer, --version, --yaml-out, --zsh-comp, -C, -M, -a, -h, -m, -p, -q, -r, -u, -y
- Hyphen-prefixed positional arguments accepted

### `jest` (https://jestjs.io/docs/cli)

- Allowed standalone flags: --all, --bail, --changedFilesWithAncestor, --ci, --clearCache, --clearMocks, --collectCoverage, --colors, --coverage, --debug, --detectOpenHandles, --errorOnDeprecated, --expand, --forceExit, --help, --json, --lastCommit, --listTests, --logHeapUsage, --noCache, --noStackTrace, --onlyChanged, --passWithNoTests, --runInBand, --showConfig, --silent, --verbose, --version, -b, -e, -h, -i, -o, -u, -w
- Allowed valued flags: --changedSince, --collectCoverageFrom, --config, --coverageDirectory, --coverageProvider, --filter, --maxConcurrency, --maxWorkers, --outputFile, --projects, --reporters, --roots, --shard, --testMatch, --testNamePattern, --testPathPattern, --testRunner, --testTimeout, -c, -t
- Bare invocation allowed

### `jira` (https://github.com/ankitpokhrel/jira-cli)

- **completion**: Positional args accepted
- **init**: Positional args accepted
- **issue list**: Positional args accepted
- **issue view**: Positional args accepted
- **me**: Positional args accepted
- **sprint list**: Positional args accepted
- Allowed standalone flags: --help, --version, -h, -v

### `jj` (https://jj-vcs.github.io/jj/latest/cli-reference/)

- **abandon**: Positional args accepted
- **absorb**: Positional args accepted
- **backout**: Positional args accepted
- **bookmark create**: Positional args accepted
- **bookmark delete**: Positional args accepted
- **bookmark forget**: Positional args accepted
- **bookmark list**: Positional args accepted
- **bookmark move**: Positional args accepted
- **bookmark rename**: Positional args accepted
- **bookmark set**: Positional args accepted
- **bookmark track**: Positional args accepted
- **bookmark untrack**: Positional args accepted
- **cat**: Positional args accepted
- **commit**: Positional args accepted
- **config get**: Positional args accepted
- **config list**: Positional args accepted
- **describe**: Positional args accepted
- **diff**: Positional args accepted
- **duplicate**: Positional args accepted
- **edit**: Positional args accepted
- **file list**: Positional args accepted
- **file show**: Positional args accepted
- **fix**: Positional args accepted
- **git fetch**: Positional args accepted
- **git import**: Positional args accepted
- **git init**: Positional args accepted
- **git remote list**: Positional args accepted
- **help**: Positional args accepted
- **log**: Positional args accepted
- **new**: Positional args accepted
- **op log**: Positional args accepted
- **parallelize**: Positional args accepted
- **rebase**: Positional args accepted
- **resolve**: Positional args accepted
- **restore**: Positional args accepted
- **root**: Positional args accepted
- **show**: Positional args accepted
- **simplify-parents**: Positional args accepted
- **split**: Positional args accepted
- **squash**: Positional args accepted
- **st**: Positional args accepted
- **status**: Positional args accepted
- **tag list**: Positional args accepted
- **undo**: Positional args accepted
- **unsquash**: Positional args accepted
- **version**: Positional args accepted
- **workspace add**: Positional args accepted
- **workspace forget**: Positional args accepted
- **workspace list**: Positional args accepted
- **workspace rename**: Positional args accepted
- **workspace root**: Positional args accepted
- **workspace update-stale**: Positional args accepted
- Allowed standalone flags: --help, --version, -h

### `jjpr` (https://github.com/michaeldhopkins/jjpr)

- **auth help**: Positional args accepted
- **auth setup**: Flags: --help, -h
- **auth test**: Flags: --help, -h
- **config help**: Positional args accepted
- **help**: Positional args accepted
- **merge** (requires --dry-run): Flags: --dry-run, --help, --no-ci-check, --no-fetch, --watch, -h. Valued: --base, --merge-method, --reconcile-strategy, --remote, --required-approvals
- **status**: Flags: --dry-run, --help, --no-fetch, -h
- **submit** (requires --dry-run): Flags: --draft, --dry-run, --help, --no-fetch, --ready, -h. Valued: --base, --remote, --reviewer
- Allowed standalone flags: --help, --version, -V, -h
- Bare invocation allowed

### `jless` (https://github.com/PaulJuliusMartinez/jless)

- Allowed standalone flags: --help, --json, --version, --yaml, -N, -V, -h, -n
- Allowed valued flags: --mode, --scrolloff

### `journalctl` (https://man7.org/linux/man-pages/man1/journalctl.1.html)

- Allowed standalone flags: --all, --catalog, --disk-usage, --dmesg, --full, --header, --help, --json, --list-boots, --list-catalog, --list-fields, --merge, --no-full, --no-hostname, --no-pager, --no-tail, --quiet, --reverse, --system, --this-boot, --user, --utc, --verify, --version, -a, -b, -f, -h, -k, -l, -m, -q, -r, -x
- Allowed valued flags: --after-cursor, --boot, --cursor, --directory, --facility, --field, --file, --identifier, --lines, --machine, --output, --priority, --since, --unit, --until, --user-unit, -D, -F, -M, -S, -U, -g, -n, -o, -p, -t, -u
- Bare invocation allowed

### `jq` (https://jqlang.github.io/jq/manual/)

- Allowed standalone flags: --ascii-output, --color-output, --compact-output, --exit-status, --help, --join-output, --monochrome-output, --null-input, --raw-input, --raw-output, --raw-output0, --seq, --slurp, --sort-keys, --tab, --version, -C, -M, -R, -S, -V, -c, -e, -g, -h, -j, -n, -r, -s
- Allowed valued flags: --arg, --argjson, --args, --from-file, --indent, --jsonargs, --rawfile, --slurpfile, -f
- Bare invocation allowed

### `just` (https://just.systems/man/en/)

- Requires --dump, --evaluate, --list, --summary, --variables, -l. - Allowed standalone flags: --dump, --evaluate, --help, --list, --summary, --unsorted, --variables, --version, -l, -u
- Allowed valued flags: --color, --dump-format, --justfile, --list-heading, --list-prefix, --list-submodules, -f

### `keytool` (https://docs.oracle.com/en/java/javase/21/docs/specs/man/keytool.html)

- **-list**: Flags: --help, -h, -rfc, -v. Valued: -alias, -keystore, -storepass, -storetype
- **-printcert**: Flags: --help, -h, -rfc, -v. Valued: -file, -jarfile
- Allowed standalone flags: --help, --version, -V, -h

### `kind` (https://kind.sigs.k8s.io/)

- **get clusters**: Flags: --help, -h
- **get kubeconfig**: Flags: --help, --internal, -h. Valued: --name
- **get nodes**: Flags: --help, -h. Valued: --name
- **version**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -h

### `ktlint` (https://pinterest.github.io/ktlint/latest/)

- Allowed standalone flags: --color, --color-name, --help, --relative, --verbose, --version, -V, -h
- Allowed valued flags: --editorconfig, --reporter
- Bare invocation allowed

### `kubectl` (https://kubernetes.io/docs/reference/kubectl/)

- **api-resources**: Flags: --help, --namespaced, --no-headers, -h. Valued: --api-group, --output, --sort-by, --verbs, -o
- **api-versions**: Flags: --help, -h
- **auth can-i**: Flags: --help, -h
- **auth whoami**: Flags: --help, -h
- **cluster-info**: Flags: --help, -h
- **config current-context**: Flags: --help, -h
- **config get-contexts**: Flags: --help, --no-headers, -h. Valued: --output, -o
- **config view**: Flags: --flatten, --help, --minify, --raw, -h. Valued: --output, -o
- **describe**: Flags: --all-namespaces, --help, --show-events, -A, -h. Valued: --namespace, --selector, -l, -n
- **diff**: Flags: --field-manager, --force-conflicts, --help, --prune, --server-side, -h. Valued: -f, --filename, -k, --kustomize, -l, --selector, --prune-allowlist. Positional args accepted
- **events**: Flags: --all-namespaces, --help, --watch, -A, -h, -w. Valued: --for, --namespace, --output, --types, -n, -o
- **explain**: Flags: --help, --recursive, -h. Valued: --api-version
- **get**: Flags: --all-namespaces, --help, --no-headers, --show-labels, --watch, -A, -h, -w. Valued: --field-selector, --label-selector, --namespace, --output, --selector, --sort-by, -l, -n, -o
- **logs**: Flags: --all-containers, --follow, --help, --previous, --timestamps, -f, -h, -p. Valued: --container, --namespace, --since, --tail, -c, -n
- **top node**: Flags: --help, --no-headers, -h. Valued: --selector, --sort-by, -l
- **top pod**: Flags: --all-namespaces, --containers, --help, --no-headers, -A, -h. Valued: --namespace, --selector, --sort-by, -l, -n
- **version**: Flags: --client, --help, --short, -h. Valued: --output, -o
- Allowed standalone flags: --help, --version, -V, -h

### `kubectx` (https://github.com/ahmetb/kubectx)

- Allowed standalone flags: --current, --help, -c, -h
- Bare invocation allowed

### `kubens` (https://github.com/ahmetb/kubectx)

- Allowed standalone flags: --current, --help, -c, -h
- Bare invocation allowed

### `kustomize` (https://kubectl.docs.kubernetes.io/references/kustomize/)

- **build**: Flags: --enable-alpha-plugins, --enable-exec, --enable-helm, --help, --load-restrictor, -h. Valued: --env, --helm-command, --mount, --output, -o
- **version**: Flags: --help, --short, -h
- Allowed standalone flags: --help, -h

### `last` (https://man7.org/linux/man-pages/man1/last.1.html)

- Allowed standalone flags: --dns, --fullnames, --fulltimes, --help, --hostlast, --ip, --nohostname, --system, --time-format, --version, -0, -1, -2, -3, -4, -5, -6, -7, -8, -9, -F, -R, -V, -a, -d, -h, -i, -w, -x
- Allowed valued flags: --limit, --present, --since, --time-format, --until, -f, -n, -p, -s, -t
- Bare invocation allowed

### `lastlog` (https://man7.org/linux/man-pages/man8/lastlog.8.html)

- Allowed standalone flags: --help, --version, -V, -h
- Allowed valued flags: --before, --time, --user, -b, -t, -u
- Bare invocation allowed

### `launchctl` (https://ss64.com/mac/launchctl.html)

- **blame**: Flags: --help, -h
- **dumpstate**: Flags: --help, -h
- **error**: Flags: --help, -h
- **examine**: Flags: --help, -h
- **help**: Flags: --help, -h
- **hostinfo**: Flags: --help, -h
- **list**: Flags: --help, -h
- **print**: Flags: --help, -h
- **print-cache**: Flags: --help, -h
- **print-disabled**: Flags: --help, -h
- **resolveport**: Flags: --help, -h
- **version**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -V, -h

### `ldd` (https://man7.org/linux/man-pages/man1/ldd.1.html)

- Allowed standalone flags: --help, --version, -d, -r, -u, -v

### `less` (https://man7.org/linux/man-pages/man1/less.1.html)

- Allowed standalone flags: -E, -F, -G, -I, -J, -K, -L, -M, -N, -Q, -R, -S, -V, -W, -X, -a, -c, -e, -f, -g, -i, -m, -n, -q, -r, -s, -w, --QUIT-AT-EOF, --RAW-CONTROL-CHARS, --chop-long-lines, --help, --ignore-case, --no-init, --quiet, --quit-at-eof, --quit-if-one-screen, --raw-control-chars, --silent, --squeeze-blank-lines, --version
- Allowed valued flags: -P, -b, -h, -j, -p, -t, -x, -y, -z, --LINE-NUMBERS, --LONG-PROMPT, --pattern, --prompt, --shift, --tabs, --tag, --window
- Bare invocation allowed

### `linear` (https://github.com/schpet/linear-cli)

- **completions**: Positional args accepted
- **issue comment list**: Positional args accepted
- **issue id**: Positional args accepted
- **issue list**: Positional args accepted
- **issue query**: Positional args accepted
- **issue title**: Positional args accepted
- **issue url**: Positional args accepted
- **issue view**: Positional args accepted
- **milestone list**: Positional args accepted
- **milestone view**: Positional args accepted
- **project list**: Positional args accepted
- **project view**: Positional args accepted
- **team id**: Positional args accepted
- **team list**: Positional args accepted
- **team members**: Positional args accepted
- Allowed standalone flags: --help, --version, -h

### `linode-cli` (https://www.linode.com/docs/products/tools/cli/get-started/)

- **account events-list**: Flags: --help
- **account view**: Flags: --help
- **databases list**: Flags: --help
- **domains list**: Flags: --help
- **domains view**: Flags: --help
- **firewalls list**: Flags: --help
- **firewalls view**: Flags: --help
- **images list**: Flags: --help
- **images view**: Flags: --help
- **linodes list**: Flags: --help
- **linodes view**: Flags: --help
- **lke cluster-view**: Flags: --help
- **lke clusters-list**: Flags: --help
- **nodebalancers list**: Flags: --help
- **nodebalancers view**: Flags: --help
- **profile view**: Flags: --help
- **regions list**: Flags: --help
- **volumes list**: Flags: --help
- **volumes view**: Flags: --help
- Allowed standalone flags: --help, --version

### `lint` (https://developer.android.com/studio/write/lint)

- Allowed standalone flags: --help, --list, --quiet, --show, --version, -V, -h
- Allowed valued flags: --check, --config, --disable, --enable
- Bare invocation allowed

### `lipo` (https://ss64.com/mac/lipo.html)

- Requires -archs, -detailed_info, -info, -verify_arch. - Allowed standalone flags: -archs, -detailed_info, -info, -verify_arch, --help, -h

### `llm` (https://llm.datasette.io/en/stable/)

- **aliases**: Flags: --help, --json, -h
- **collections**: Flags: --help, --json, -h
- **logs**: Flags: --conversation, --help, --json, --no-truncate, --response, --truncate, -h. Valued: --cid, --count, --id, --model, --search, -c, -m, -n
- **models**: Flags: --help, --json, --options, -h
- **plugins**: Flags: --all, --help, --json, -h
- **templates**: Flags: --help, --json, -h
- Allowed standalone flags: --help, --version, -V, -h

### `locale` (https://man7.org/linux/man-pages/man1/locale.1.html)

- Allowed standalone flags: --all-locales, --category-name, --charmaps, --help, --keyword-name, --verbose, --version, -V, -a, -c, -h, -k, -m, -v
- Bare invocation allowed

### `locate` (https://man7.org/linux/man-pages/man1/locate.1.html)

Aliases: `mlocate`, `plocate`

- Allowed standalone flags: --all, --basename, --count, --existing, --follow, --help, --ignore-case, --null, --quiet, --statistics, --version, --wholename, -0, -A, -S, -V, -b, -c, -e, -h, -i, -q, -w
- Allowed valued flags: --database, --limit, -d, -l, -n

### `log` (https://ss64.com/mac/log.html)

- **help**: Flags: --help, -h
- **show**: Flags: --backtrace, --debug, --help, --info, --loss, --mach-continuous-time, --no-pager, --signpost, -h. Valued: --color, --end, --last, --predicate, --process, --source, --start, --style, --type
- **stats**: Flags: --help, -h
- **stream**: Flags: --backtrace, --debug, --help, --info, --loss, --mach-continuous-time, --signpost, -h. Valued: --color, --level, --predicate, --process, --source, --style, --timeout, --type
- Allowed standalone flags: --help, --version, -V, -h

### `ls` (https://www.gnu.org/software/coreutils/manual/coreutils.html#ls-invocation)

- Allowed standalone flags: --all, --almost-all, --author, --classify, --context, --dereference, --dereference-command-line, --dereference-command-line-symlink-to-dir, --directory, --escape, --file-type, --full-time, --group-directories-first, --help, --hide-control-chars, --human-readable, --indicator-style, --inode, --kibibytes, --literal, --no-group, --numeric-uid-gid, --quote-name, --recursive, --reverse, --show-control-chars, --si, --size, --version, -1, -A, -B, -C, -F, -G, -H, -L, -N, -Q, -R, -S, -U, -V, -X, -Z, -a, -c, -d, -f, -g, -h, -i, -k, -l, -m, -n, -o, -p, -q, -r, -s, -t, -u, -v, -x
- Allowed valued flags: --block-size, --color, --format, --hide, --hyperlink, --ignore, --quoting-style, --sort, --tabsize, --time, --time-style, --width, -I, -T, -w
- Bare invocation allowed

### `lsblk` (https://man7.org/linux/man-pages/man8/lsblk.8.html)

- Allowed standalone flags: --all, --ascii, --bytes, --dedup, --discard, --fs, --help, --inverse, --json, --list, --merge, --nodeps, --noheadings, --output-all, --pairs, --paths, --perms, --raw, --scsi, --topology, --tree, --version, --zoned, -A, -J, -O, -P, -S, -T, -V, -a, -b, -d, -f, -h, -i, -l, -m, -n, -p, -r, -s, -t, -z
- Allowed valued flags: --exclude, --include, --output, --sort, --width, -E, -I, -e, -o, -w, -x
- Bare invocation allowed

### `lsof` (https://man7.org/linux/man-pages/man8/lsof.8.html)

- Allowed standalone flags: --help, --version, -C, -G, -M, -N, -O, -P, -R, -U, -V, -X, -b, -h, -l, -n, -t, -w, -x
- Allowed valued flags: -F, -S, -T, -a, -c, -d, -g, -i, -k, -o, -p, -r, -s, -u
- Bare invocation allowed

### `lua` (https://www.lua.org/manual/5.4/readme.html)

- Allowed standalone flags: --help, --version, -v

### `magick` (https://imagemagick.org/script/command-line-tools.php)

- **identify**: Flags: --help, -h, -matte, -moments, -ping, -quiet, -regard-warnings, -unique, -verbose. Valued: -alpha, -colorspace, -define, -density, -depth, -endian, -format, -interlace, -limit, -precision, -sampling-factor, -size, -units, -virtual-pixel
- Allowed standalone flags: --help, --version, -V, -h

### `make` (https://www.gnu.org/software/make/manual/make.html)

- Requires -n, --dry-run, --just-print, --recon, -p, --print-data-base. - Allowed standalone flags: --dry-run, --help, --just-print, --print-data-base, --question, --recon, --version, -V, -h, -n, -p, -q
- Allowed valued flags: --directory, --file, --jobs, --makefile, -C, -f, -j

### `man` (https://man7.org/linux/man-pages/man1/man.1.html)

- Allowed standalone flags: --all, --apropos, --default, --help, --local-file, --regex, --update, --version, --whatis, --where, --where-cat, --wildcard, -V, -a, -f, -h, -k, -l, -u, -w
- Allowed valued flags: --config-file, --encoding, --extension, --locale, --manpath, --sections, --systems, -C, -E, -L, -M, -S, -e, -m

### `md5` (https://man7.org/linux/man-pages/man1/md5sum.1.html)

- Allowed standalone flags: --help, --version, -V, -h, -n, -p, -q, -r, -t
- Allowed valued flags: -s
- Bare invocation allowed

### `md5sum` (https://www.gnu.org/software/coreutils/manual/coreutils.html#md5sum-invocation)

- Allowed standalone flags: --binary, --check, --help, --ignore-missing, --quiet, --status, --strict, --tag, --text, --version, --warn, --zero, -V, -b, -c, -h, -t, -w, -z
- Bare invocation allowed

### `mdbook` (https://rust-lang.github.io/mdBook/)

- **build**: Flags: --help, --open, -h, -o. Valued: --dest-dir, -d
- **clean**: Flags: --help, -h. Valued: --dest-dir, -d
- **test**: Flags: --help, -h. Valued: --dest-dir, --library-path, -L, -d
- Allowed standalone flags: --help, --version, -V, -h

### `mdfind` (https://ss64.com/mac/mdfind.html)

- Allowed standalone flags: --help, --version, -0, -V, -count, -h, -interpret, -literal, -live
- Allowed valued flags: -attr, -name, -onlyin, -s

### `mdls` (https://ss64.com/mac/mdls.html)

- Allowed standalone flags: -V, -h, -r, --help, --raw, --version
- Allowed valued flags: -n, --name, --nullMarker

### `meson` (https://mesonbuild.com/Commands.html)

- **configure**: Flags: --help, -h
- **info**: Flags: --help, -h
- **introspect**: Flags: --all, --benchmarks, --buildoptions, --buildsystem-files, --dependencies, --help, --installed, --projectinfo, --targets, --tests, -a, -h. Valued: --backend, --indent
- Allowed standalone flags: --help, --version, -V, -h

### `minikube` (https://minikube.sigs.k8s.io/docs/)

- **addons list**: Flags: --help, --output, -h, -o. Valued: --profile, -p
- **ip**: Flags: --help, -h. Valued: --node, --profile, -n, -p
- **profile list**: Flags: --help, --light, --output, -h, -l, -o
- **service list**: Flags: --help, --namespace, -h. Valued: --profile, -p
- **status**: Flags: --format, --help, --output, -h, -o. Valued: --node, --profile, -n, -p
- **version**: Flags: --components, --help, --output, --short, -h, -o
- Allowed standalone flags: --help, --version, -h

### `mise` (https://mise.jdx.dev/cli/)

- **activate**: Flags: --help, -h
- **backends list**: Flags: --help, -h, -q, -v
- **backends ls**: Flags: --help, -h, -q, -v
- **bin-paths**: Flags: --help, -h, -q, -v
- **cache clear**: Flags: --help, -h
- **cache path**: Flags: --help, -h, -q, -v
- **cache prune**: Flags: --help, -h
- **completion**: Flags: --help, -h, -q, -v
- **config generate**: Flags: --help, -h
- **config get**: Flags: --help, -h, -q, -v
- **config list**: Flags: --help, -h, -q, -v
- **config ls**: Flags: --help, -h, -q, -v
- **config set**: Flags: --help, -h
- **current**: Flags: --help, -h, -q, -v
- **deactivate**: Flags: --help, -h
- **doctor**: Flags: --help, -h, -q, -v
- **edit**: Flags: --help, -h
- **en**: Flags: --help, -h
- **env**: Flags: --help, --json, -J, -h. Valued: --shell, -s
- **fmt**: Flags: --check, --help, -h
- **generate**: Flags: --help, -h
- **implode**: Flags: --help, -h
- **install**: Flags: --help, -h
- **latest**: Flags: --help, -h, -q, -v
- **link**: Flags: --help, -h
- **list**: Flags: --current, --help, --installed, --json, --missing, --no-header, --prefix, -J, -c, -h, -i, -m
- **lock**: Flags: --help, -h
- **ls**: Flags: --current, --help, --installed, --json, --missing, --no-header, --prefix, -J, -c, -h, -i, -m
- **ls-remote**: Flags: --all, --help, -h
- **outdated**: Flags: --help, --json, --no-header, -J, -h
- **plugins install**: Flags: --help, -h
- **plugins link**: Flags: --help, -h
- **plugins list**: Flags: --help, -h, -q, -v
- **plugins ls**: Flags: --help, -h, -q, -v
- **plugins ls-remote**: Flags: --help, -h, -q, -v
- **plugins uninstall**: Flags: --help, -h
- **plugins update**: Flags: --help, -h
- **prepare**: Flags: --help, -h
- **prune**: Flags: --help, -h
- **registry**: Flags: --help, -h. Valued: --backend, -b
- **reshim**: Flags: --force, --help, -h
- **run**: Flags: --help, -h
- **search**: Flags: --help, -h
- **self-update**: Flags: --help, -h
- **set**: Flags: --help, --json, -J, -h
- **settings add**: Flags: --help, -h
- **settings get**: Flags: --help, -h, -q, -v
- **settings list**: Flags: --help, -h, -q, -v
- **settings ls**: Flags: --help, -h, -q, -v
- **settings set**: Flags: --help, -h
- **settings unset**: Flags: --help, -h
- **shell**: Flags: --help, -h
- **shell-alias get**: Flags: --help, -h, -q, -v
- **shell-alias list**: Flags: --help, -h, -q, -v
- **shell-alias ls**: Flags: --help, -h, -q, -v
- **shell-alias set**: Flags: --help, -h
- **shell-alias unset**: Flags: --help, -h
- **sync**: Flags: --help, -h
- **tasks add**: Flags: --help, -h
- **tasks deps**: Flags: --help, -h, -q, -v
- **tasks edit**: Flags: --help, -h
- **tasks info**: Flags: --help, -h, -q, -v
- **tasks list**: Flags: --help, -h, -q, -v
- **tasks ls**: Flags: --help, -h, -q, -v
- **tasks run**: Flags: --help, -h
- **tool**: Flags: --help, -h, -q, -v
- **tool-alias get**: Flags: --help, -h, -q, -v
- **tool-alias list**: Flags: --help, -h, -q, -v
- **tool-alias ls**: Flags: --help, -h, -q, -v
- **tool-alias set**: Flags: --help, -h
- **tool-alias unset**: Flags: --help, -h
- **trust**: Flags: --help, --show, -h
- **uninstall**: Flags: --help, -h
- **unset**: Flags: --help, -h
- **unuse**: Flags: --help, -h
- **upgrade**: Flags: --help, -h
- **use**: Flags: --help, -h
- **watch**: Flags: --help, -h
- **where**: Flags: --help, -h, -q, -v
- **which**: Flags: --help, -h, -q, -v
- Allowed standalone flags: --help, --version, -V, -h

### `mix` (https://hexdocs.pm/mix/Mix.html)

- Allowed standalone flags: --help, --version, -h, -v

### `mlr` (https://miller.readthedocs.io/)

- Data processing allowed. Verbs and file arguments accepted.

### `mocha` (https://mochajs.org/)

- Allowed standalone flags: --bail, --check-leaks, --color, --diff, --dry-run, --exit, --forbid-only, --forbid-pending, --full-trace, --help, --inline-diffs, --invert, --list-files, --list-reporters, --no-color, --no-diff, --no-timeouts, --parallel, --quiet, --recursive, --sort, --version, -A, -R, -V, -b, -c, -h
- Allowed valued flags: --config, --delay, --extension, --fgrep, --file, --grep, --ignore, --jobs, --node-option, --package, --reporter, --reporter-option, --require, --retries, --slow, --spec, --timeout, --ui, -f, -g, -j, -n, -r, -s, -t, -u
- Bare invocation allowed

### `more` (https://man7.org/linux/man-pages/man1/more.1.html)

- Allowed standalone flags: -V, -c, -d, -f, -h, -l, -p, -s, -u, --help, --version
- Allowed valued flags: -n, --lines
- Bare invocation allowed

### `mtr` (https://man7.org/linux/man-pages/man8/mtr.8.html)

- Allowed standalone flags: --help, --no-dns, --report, --report-wide, --show-ips, --version, -4, -6, -V, -b, -h, -n, -r, -w
- Allowed valued flags: --address, --count, --interval, --max-ttl, --psize, --report-cycles, --type, -I, -a, -c, -i, -m, -s

### `mvn / mvnw` (https://maven.apache.org/ref/current/maven-embedder/cli.html)

- Phases: compile, dependency:list, dependency:tree, help:describe, test, test-compile, validate, verify.

### `mypy` (https://mypy.readthedocs.io/en/stable/command_line.html)

- Allowed standalone flags: --help, --no-error-summary, --no-incremental, --pretty, --show-column-numbers, --show-error-codes, --show-error-context, --strict, --verbose, --version, --warn-redundant-casts, --warn-return-any, --warn-unreachable, --warn-unused-ignores, -V, -h, -v
- Allowed valued flags: --cache-dir, --config-file, --exclude, --follow-imports, --ignore-missing-imports, --module, --namespace-packages, --package, --python-executable, --python-version, -m, -p

### `netlify` (https://cli.netlify.com/)

- **completion**: Flags: --help, -h
- **env:list**: Flags: --help, --json, --plain, -h. Valued: --context, --scope
- **functions:list**: Flags: --help, --json, -h
- **logs**: Flags: --help, -h. Valued: --level, --type
- **sites:list**: Flags: --help, --json, -h
- **status**: Flags: --help, --verbose, -h
- **teams:list**: Flags: --help, --json, -h
- Allowed standalone flags: --help, -h

### `netstat` (https://man7.org/linux/man-pages/man8/netstat.8.html)

- Allowed standalone flags: --all, --continuous, --extend, --groups, --help, --interfaces, --listening, --masquerade, --numeric, --numeric-hosts, --numeric-ports, --numeric-users, --program, --route, --statistics, --symbolic, --tcp, --timers, --udp, --unix, --verbose, --version, --wide, -A, -C, -L, -M, -N, -R, -S, -V, -W, -Z, -a, -b, -c, -d, -e, -f, -g, -h, -i, -l, -m, -n, -o, -p, -q, -r, -s, -t, -u, -v, -w, -x
- Allowed valued flags: -I
- Bare invocation allowed

### `networksetup` (https://ss64.com/mac/networksetup.html)

- Allowed first arguments: -list*, -get*, -show*, -print*, -version, --version, -V, -help, --help, -h

### `newrelic` (https://github.com/newrelic/newrelic-cli)

- **apm application**: Flags: --help, -h. Valued: --accountId, --guid, --name, -a
- **entity search**: Flags: --help, -h. Valued: --fields-filter, --type. Positional args accepted
- **entity tags**: Flags: --help, -h
- **nrql query**: Flags: --help, -h. Valued: --accountId, --query, -a, -q
- **profile list**: Flags: --help, -h
- **version**
- **workload get**: Flags: --help, -h. Valued: --accountId, --guid, -a
- **workload list**: Flags: --help, -h. Valued: --accountId, -a
- Allowed standalone flags: --help, --version, -h

### `next` (https://nextjs.org/docs/api-reference/cli)

- **build**: Flags: --debug, --help, --lint, --no-lint, --profile, -d, -h
- **info**: Flags: --help, -h
- **lint**: Flags: --dir, --help, --quiet, --strict, -d, -h. Valued: --cache-location, --ext, --max-warnings, --output-file, --resolve-plugins-relative-to, -c
- Allowed standalone flags: --help, --version, -h

### `nice` (https://www.gnu.org/software/coreutils/manual/coreutils.html#nice-invocation)

Aliases: `ionice`

- Recursively validates the inner command.

### `ninja` (https://ninja-build.org/manual.html)

- Requires -t, -n. - Allowed standalone flags: --help, --version, -n, -v, -V, -h
- Allowed valued flags: -C, -f, -j, -k, -l, -t

### `nl` (https://www.gnu.org/software/coreutils/manual/coreutils.html#nl-invocation)

- Allowed standalone flags: -V, -p, --help, --no-renumber, --version
- Allowed valued flags: -b, -d, -f, -h, -i, -l, -n, -s, -v, -w, --body-numbering, --footer-numbering, --header-numbering, --join-blank-lines, --line-increment, --number-format, --number-separator, --number-width, --section-delimiter, --starting-line-number
- Bare invocation allowed

### `nm` (https://man7.org/linux/man-pages/man1/nm.1.html)

- Allowed standalone flags: -A, -B, -C, -D, -P, -S, -V, -a, -g, -h, -j, -l, -m, -n, -o, -p, -r, -s, -u, -v, -x, --debug-syms, --defined-only, --demangle, --dynamic, --extern-only, --help, --line-numbers, --no-demangle, --no-llvm-bc, --no-sort, --numeric-sort, --portability, --print-armap, --print-file-name, --print-size, --reverse-sort, --special-syms, --undefined-only, --version
- Allowed valued flags: -f, -t, --format, --radix, --size-sort, --target

### `node` (https://nodejs.org/api/cli.html)

- Allowed standalone flags: --help, --version, -h, -v

### `notion` (https://github.com/4ier/notion-cli)

- **block get**: Positional args accepted
- **block list**: Positional args accepted
- **comment get**: Positional args accepted
- **comment list**: Positional args accepted
- **db list**: Positional args accepted
- **db open**: Positional args accepted
- **db query**: Positional args accepted
- **db view**: Positional args accepted
- **doctor**: Positional args accepted
- **file list**: Positional args accepted
- **page list**: Positional args accepted
- **page open**: Positional args accepted
- **page view**: Positional args accepted
- **search**: Positional args accepted
- **status**: Positional args accepted
- **user get**: Positional args accepted
- **user list**: Positional args accepted
- **user me**: Positional args accepted
- Allowed standalone flags: --help, --version, -h

### `nox` (https://nox.thea.codes/)

- Allowed standalone flags: --error-on-external-run, --error-on-missing-interpreters, --help, --list, --no-color, --no-error-on-external-run, --no-error-on-missing-interpreters, --no-install, --no-venv, --reuse-existing-virtualenvs, --stop-on-first-error, --version, -R, -h, -l, -r, -x
- Allowed valued flags: --default-venv-backend, --envdir, --extra-pythons, --force-pythons, --noxfile, --pythons, --sessions, --tags, -e, -f, -p, -s, -t
- Bare invocation allowed

### `npm` (https://docs.npmjs.com/cli)

- **audit**: Flags: --help, --json, --omit, --production, -h. Valued: --audit-level
- **ci**: Flags: --help, --ignore-scripts, --legacy-bundling, --no-audit, --no-fund, --no-optional, --production, -h
- **config get**: Flags: --help, --json, --long, -h, -l
- **config list**: Flags: --help, --json, --long, -h, -l
- **doctor**: Flags: --help, --json, -h
- **explain**: Flags: --help, --json, -h
- **fund**: Flags: --help, --json, -h
- **info**: Flags: --help, --json, -h
- **list**: Flags: --all, --help, --json, --link, --long, --omit, --parseable, --production, --unicode, -a, -h, -l. Valued: --depth, --prefix
- **ls**: Flags: --all, --help, --json, --link, --long, --omit, --parseable, --production, --unicode, -a, -h, -l. Valued: --depth, --prefix
- **outdated**: Flags: --help, --json, -h
- **prefix**: Flags: --help, --json, -h
- **root**: Flags: --help, --json, -h
- **run**: Allowed arguments: test, test:*
- **run-script**: Allowed arguments: test, test:*
- **test**: Flags: --help, -h
- **view**: Flags: --help, --json, -h
- **why**: Flags: --help, --json, -h
- Allowed standalone flags: --help, --version, -V, -h

### `nproc` (https://www.gnu.org/software/coreutils/manual/coreutils.html#nproc-invocation)

- Allowed standalone flags: --all, --help, --version, -V, -h
- Allowed valued flags: --ignore
- Bare invocation allowed

### `npx` (https://docs.npmjs.com/cli/commands/npx)

- Delegates to the inner command's safety rules.
- Skips flags: --yes/-y/--no/--package/-p.

### `nroff` (https://man7.org/linux/man-pages/man1/nroff.1.html)

- Allowed standalone flags: -S, -V, -c, -h, -i, -k, -p, -q, -t, --help, --version
- Allowed valued flags: -M, -P, -T, -d, -m, -n, -o, -r, -w

### `nslookup` (https://man7.org/linux/man-pages/man1/nslookup.1.html)

- Allowed: positional args, -debug, -nodebug, -d2, and valued options (-type=, -query=, -port=, -timeout=, -retry=, -class=, -domain=, -querytype=).

### `nvm` (https://github.com/nvm-sh/nvm#readme)

- **current**: Flags: --help, --lts, --no-colors, -h
- **list**: Flags: --help, --lts, --no-colors, -h
- **ls**: Flags: --help, --lts, --no-colors, -h
- **ls-remote**: Flags: --help, --lts, --no-colors, -h
- **version**: Flags: --help, --lts, --no-colors, -h
- **which**: Flags: --help, --lts, --no-colors, -h
- Allowed standalone flags: --help, --version, -V, -h

### `nx` (https://nx.dev/reference/commands)

- **format** (requires --check): Flags: --all, --base, --check, --head, --help, --uncommitted, --untracked, -h. Valued: --exclude, --files, --projects
- **graph**: Flags: --affected, --help, --open, --watch, -h. Valued: --file, --focus, --groupByFolder, --host, --port, --targets, --view
- **list**: Flags: --help, -h. Valued: --plugin
- **print-affected**: Flags: --all, --base, --head, --help, --select, --uncommitted, --untracked, -h. Valued: --exclude, --files, --type
- **report**: Flags: --help, -h
- **show**: Flags: --help, --json, -h. Valued: --projects, --type, --web
- Allowed standalone flags: --help, --version, -h

### `objdump` (https://man7.org/linux/man-pages/man1/objdump.1.html)

- Allowed standalone flags: --all-headers, --archive-headers, --debugging, --disassemble, --disassemble-all, --dynamic-reloc, --dynamic-syms, --file-headers, --full-contents, --headers, --help, --info, --line-numbers, --no-addresses, --no-show-raw-insn, --private-headers, --reloc, --section-headers, --source, --stabs, --syms, --version, --wide, -C, -D, -G, -R, -S, -T, -V, -W, -a, -d, -f, -g, -h, -l, -p, -r, -s, -t, -w, -x
- Allowed valued flags: --demangle, --disassemble-symbols, --dwarf, --section, --start-address, --stop-address, --target, -M, -b, -j, -m

### `od` (https://www.gnu.org/software/coreutils/manual/coreutils.html#od-invocation)

- Allowed standalone flags: -V, -b, -c, -d, -f, -h, -i, -l, -o, -s, -v, -x, --help, --output-duplicates, --traditional, --version
- Allowed valued flags: -A, -N, -S, -j, -t, -w, --address-radix, --endian, --format, --read-bytes, --skip-bytes, --strings, --width
- Bare invocation allowed

### `ollama` (https://github.com/ollama/ollama/blob/main/docs/api.md)

- **list**: Flags: --help, --json, -h
- **ps**: Flags: --help, --json, -h
- **show**: Flags: --help, --json, --license, --modelfile, --parameters, --system, --template, --verbose, -h
- Allowed standalone flags: --help, --version, -V, -h

### `opencode` (https://opencode.ai/docs/)

- **models**: Flags: --help, -h
- **session list**: Flags: --help, -h
- **stats**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -V, -h

### `orb` (https://docs.orbstack.dev/cli)

- **config get**: Flags: --help, -h
- **config show**: Flags: --help, -h
- **default**: Flags: --help, -h
- **doctor**: Flags: --help, -h
- **info**: Flags: --help, -h. Valued: --format, -f
- **list**: Flags: --help, --quiet, --running, -h, -q, -r. Valued: --format, -f
- **logs**: Flags: --all, --help, -a, -h
- **status**: Flags: --help, -h
- **update** (requires --check): Flags: --check, --help, -h
- **version**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -V, -h

### `orbctl` (https://docs.orbstack.dev/cli)

- **config get**: Flags: --help, -h
- **config show**: Flags: --help, -h
- **default**: Flags: --help, -h
- **doctor**: Flags: --help, -h
- **info**: Flags: --help, -h. Valued: --format, -f
- **list**: Flags: --help, --quiet, --running, -h, -q, -r. Valued: --format, -f
- **logs**: Flags: --all, --help, -a, -h
- **status**: Flags: --help, -h
- **update** (requires --check): Flags: --check, --help, -h
- **version**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -V, -h

### `otool` (https://ss64.com/mac/otool.html)

- Allowed standalone flags: -D, -I, -L, -V, -X, -a, -c, -d, -f, -h, -l, -o, -r, -t, -v, -x, --help, --version
- Allowed valued flags: -p, -s

### `overmind` (https://github.com/DarthSim/overmind)

- **connect**: Flags: --help, -h
- **echo**: Flags: --help, -h
- **kill**: Flags: --help, -h
- **quit**: Flags: --help, -h
- **restart**: Flags: --help, -h
- **start**: Flags: --daemonize, --help, --no-port, -D, -N, -h. Valued: --colors, --formation, --port, --port-step, --procfile, --root, --socket, --title, -T, -c, -f, -l, -p, -r, -s
- **status**: Flags: --help, -h
- **stop**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -h, -v

### `packer` (https://developer.hashicorp.com/packer/docs/commands)

- **fmt** (requires --check): Flags: --check, --diff, --help, --recursive, -h. Valued: --write
- **inspect**: Flags: --help, --machine-readable, -h
- **validate**: Flags: --help, --no-warn-undeclared-var, --syntax-only, -h. Valued: --except, --only, --var, --var-file, -e, -o
- Allowed standalone flags: --help, --version, -h

### `paste` (https://www.gnu.org/software/coreutils/manual/coreutils.html#paste-invocation)

- Allowed standalone flags: -V, -h, -s, -z, --help, --serial, --version, --zero-terminated
- Allowed valued flags: -d, --delimiters
- Bare invocation allowed

### `pdm` (https://pdm-project.org/)

- **config**: Flags: --delete, --global, --help, --local, --project, -d, -g, -h, -l
- **info**: Flags: --env, --help, --json, --packages, --python, --where, -h
- **list**: Flags: --csv, --freeze, --graph, --help, --json, --markdown, --reverse, --tree, -h. Valued: --exclude, --fields, --include, --resolve, --sort
- **search**: Flags: --help, -h
- **show**: Flags: --help, --json, --keywords, --name, --platform, --summary, --version, -h
- Allowed standalone flags: --help, --version, -V, -h

### `peco` (https://github.com/peco/peco)

- Allowed standalone flags: --help, --null, --print-query, --select-1, --version, -h, -v
- Allowed valued flags: --buffer-size, --initial-filter, --initial-index, --layout, --on-cancel, --prompt, --query, --selection-prefix, -b
- Bare invocation allowed

### `periphery` (https://github.com/peripheryapp/periphery)

- **scan**: Flags: --help, --quiet, --skip-build, --strict, --verbose, -h. Valued: --config, --format, --index-store-path, --project, --schemes, --targets
- **version**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -V, -h

### `perl` (https://perldoc.perl.org/perl)

- Allowed: -e/-E inline one-liners with safe built-in functions, --version, --help, -v, -V. Requires -e/-E flag. Code is validated against a safe identifier allowlist.

### `pg_dump` (https://www.postgresql.org/docs/current/app-pgdump.html)

- Requires --schema-only, -s. - Allowed standalone flags: --help, --no-comments, --no-owner, --no-privileges, --no-tablespaces, --schema-only, --verbose, --version, -V, -h, -s, -v
- Allowed valued flags: --dbname, --encoding, --file, --format, --host, --port, --schema, --table, --username, -E, -F, -U, -d, -f, -n, -p, -t

### `pg_isready` (https://www.postgresql.org/docs/current/app-pg-isready.html)

- Allowed standalone flags: --help, --quiet, --version, -V, -q
- Allowed valued flags: --dbname, --host, --port, --timeout, --username, -U, -d, -h, -p, -t
- Bare invocation allowed

### `pgrep` (https://man7.org/linux/man-pages/man1/pgrep.1.html)

- Allowed standalone flags: --count, --delimiter, --full, --help, --inverse, --lightweight, --list-full, --list-name, --newest, --oldest, --version, -L, -V, -a, -c, -f, -h, -i, -l, -n, -o, -v, -w, -x
- Allowed valued flags: --euid, --group, --parent, --pgroup, --pidfile, --session, --terminal, --uid, -F, -G, -P, -U, -d, -g, -s, -t, -u

### `php` (https://www.php.net/manual/en/features.commandline.options.php)

- Allowed standalone flags: --help, --version, -h, -v

### `pick` (https://github.com/mptre/pick)

- Allowed standalone flags: --help, --version, -K, -S, -X, -d, -h, -o, -v, -x
- Allowed valued flags: -q
- Bare invocation allowed

### `ping` (https://man7.org/linux/man-pages/man8/ping.8.html)

- Requires -c, --count. - Allowed standalone flags: -4, -6, -D, -O, -R, -a, -d, -n, -q, -v, --help, -h, --version, -V
- Allowed valued flags: --count, --deadline, --interface, --interval, --ttl, -I, -Q, -S, -W, -c, -i, -l, -s, -t, -w

### `pip` (https://pip.pypa.io/en/stable/cli/)

Aliases: `pip3`

- **check**: Flags: --help, -h
- **config get**: Flags: --help, -h
- **config list**: Flags: --help, -h
- **debug**: Flags: --help, -h
- **download**: Flags: --help, --no-deps, --pre, --quiet, --require-hashes, --verbose, -h, -q, -v. Valued: --constraint, --dest, --extra-index-url, --find-links, --index-url, --no-binary, --only-binary, --platform, --python-version, --requirement, -c, -d, -f, -i, -r
- **freeze**: Flags: --all, --exclude-editable, --help, --local, --user, -h, -l. Valued: --exclude, --path
- **help**: Flags: --help, -h
- **index**: Flags: --help, -h
- **inspect**: Flags: --help, -h
- **install** (requires --dry-run): Flags: --dry-run, --help, --no-deps, --pre, --quiet, --require-hashes, --user, --verbose, -U, -h, -q, -v. Valued: --constraint, --extra-index-url, --find-links, --index-url, --no-binary, --only-binary, --platform, --python-version, --requirement, --target, --upgrade-strategy, -c, -f, -i, -r, -t
- **list**: Flags: --editable, --exclude-editable, --help, --include-editable, --local, --not-required, --outdated, --pre, --uptodate, --user, -e, -h, -i, -l, -o. Valued: --exclude, --format, --index-url, --path
- **show**: Flags: --files, --help, --verbose, -f, -h, -v
- Allowed standalone flags: --help, --version, -V, -h

### `pip-audit` (https://github.com/pypa/pip-audit)

- Allowed standalone flags: --desc, --dry-run, --help, --json, --local, --no-deps, --skip-editable, --strict, --verbose, --version, -S, -h, -l, -s, -v
- Allowed valued flags: --cache-dir, --exclude, --format, --ignore-vuln, --index-url, --output, --path, --requirement, -e, -f, -i, -o, -r
- Bare invocation allowed

### `pkgutil` (https://ss64.com/mac/pkgutil.html)

- Requires --check-signature, --export-plist, --file-info, --file-info-plist, --files, --group-pkgs, --groups, --groups-plist, --packages, --payload-files, --pkg-groups, --pkg-info, --pkg-info-plist, --pkgs, --pkgs-plist. - Allowed standalone flags: --check-signature, --export-plist, --file-info, --file-info-plist, --files, --group-pkgs, --groups, --groups-plist, --packages, --payload-files, --pkg-groups, --pkg-info, --pkg-info-plist, --pkgs, --pkgs-plist, --regexp, --help, -h
- Allowed valued flags: --volume

### `plutil` (https://ss64.com/mac/plutil.html)

- **-lint**: Flags: --help, -h, -s
- **-p**: Flags: --help, -h
- **-type**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -V, -h, -help

### `pmset` (https://ss64.com/mac/pmset.html)

- Requires -g. - Allowed standalone flags: -g, --help, -h

### `pnpm` (https://pnpm.io/pnpm-cli)

- **audit**: Flags: --help, --json, --recursive, -h, -r. Valued: --filter
- **list**: Flags: --dev, --help, --json, --long, --no-optional, --parseable, --production, --recursive, -P, -h, -r. Valued: --depth, --filter
- **ls**: Flags: --dev, --help, --json, --long, --no-optional, --parseable, --production, --recursive, -P, -h, -r. Valued: --depth, --filter
- **outdated**: Flags: --help, --json, --recursive, -h, -r. Valued: --filter
- **why**: Flags: --help, --json, --recursive, -h, -r. Valued: --filter
- Allowed standalone flags: --help, --version, -V, -h

### `pod` (https://guides.cocoapods.org/terminal/commands.html)

- **env**: Flags: --help, -h
- **info**: Flags: --help, -h
- **list**: Flags: --help, -h
- **search**: Flags: --help, --simple, --stats, --web, -h
- **spec cat**: Flags: --help, -h. Valued: --version
- **spec which**: Flags: --help, -h. Valued: --version
- Allowed standalone flags: --help, --version, -V, -h

### `podman` (https://docs.podman.io/en/latest/Commands.html)

- **buildx --version**
- **buildx inspect**: Flags: --help, -h
- **buildx ls**: Flags: --help, -h
- **buildx version**: Flags: --help, -h
- **compose --version**
- **compose config**: Flags: --dry-run, --hash, --help, --images, --no-consistency, --no-interpolate, --no-normalize, --no-path-resolution, --profiles, --quiet, --resolve-image-digests, --services, --volumes, -h, -q. Valued: --format, --output, -o
- **compose images**: Flags: --help, -h
- **compose ls**: Flags: --help, -h
- **compose ps**: Flags: --all, --help, --no-trunc, --orphans, --quiet, --services, -a, -h, -q. Valued: --filter, --format, --status
- **compose top**: Flags: --help, -h
- **compose version**: Flags: --help, -h
- **container diff**: Flags: --help, -h
- **container inspect**: Flags: --help, --size, -h, -s. Valued: --format, --type, -f
- **container list**: Flags: --all, --help, --last, --latest, --no-trunc, --quiet, --size, -a, -h, -l, -n, -q, -s. Valued: --filter, --format, -f
- **container logs**: Flags: --details, --follow, --help, --timestamps, -f, -h, -t. Valued: --since, --tail, --until, -n
- **container ls**: Flags: --all, --help, --last, --latest, --no-trunc, --quiet, --size, -a, -h, -l, -n, -q, -s. Valued: --filter, --format, -f
- **container port**: Flags: --help, -h
- **container stats**: Flags: --all, --help, --no-stream, --no-trunc, -a, -h. Valued: --format
- **container top**: Flags: --help, -h
- **context inspect**: Flags: --help, --no-trunc, --quiet, -h, -q. Valued: --filter, --format, -f
- **context ls**: Flags: --help, --no-trunc, --quiet, -h, -q. Valued: --filter, --format, -f
- **context show**: Flags: --help, --no-trunc, --quiet, -h, -q. Valued: --filter, --format, -f
- **diff**: Flags: --help, -h
- **history**: Flags: --help, --human, --no-trunc, --quiet, -H, -h, -q. Valued: --format
- **image history**: Flags: --help, --human, --no-trunc, --quiet, -H, -h, -q. Valued: --format
- **image inspect**: Flags: --help, --size, -h, -s. Valued: --format, --type, -f
- **image list**: Flags: --all, --digests, --help, --no-trunc, --quiet, -a, -h, -q. Valued: --filter, --format, -f
- **image ls**: Flags: --all, --digests, --help, --no-trunc, --quiet, -a, -h, -q. Valued: --filter, --format, -f
- **images**: Flags: --all, --digests, --help, --no-trunc, --quiet, -a, -h, -q. Valued: --filter, --format, -f
- **info**: Flags: --help, -h. Valued: --format, -f
- **inspect**: Flags: --help, --size, -h, -s. Valued: --format, --type, -f
- **logs**: Flags: --details, --follow, --help, --timestamps, -f, -h, -t. Valued: --since, --tail, --until, -n
- **manifest inspect**: Flags: --help, --size, -h, -s. Valued: --format, --type, -f
- **network inspect**: Flags: --help, --no-trunc, --quiet, -h, -q. Valued: --filter, --format, -f
- **network ls**: Flags: --help, --no-trunc, --quiet, -h, -q. Valued: --filter, --format, -f
- **port**: Flags: --help, -h
- **ps**: Flags: --all, --help, --last, --latest, --no-trunc, --quiet, --size, -a, -h, -l, -n, -q, -s. Valued: --filter, --format, -f
- **stats**: Flags: --all, --help, --no-stream, --no-trunc, -a, -h. Valued: --format
- **system df**: Flags: --help, -h. Valued: --format, -f
- **system info**: Flags: --help, -h. Valued: --format, -f
- **top**: Flags: --help, -h
- **version**: Flags: --help, -h. Valued: --format, -f
- **volume inspect**: Flags: --help, --no-trunc, --quiet, -h, -q. Valued: --filter, --format, -f
- **volume ls**: Flags: --help, --no-trunc, --quiet, -h, -q. Valued: --filter, --format, -f
- Allowed standalone flags: --help, --version, -V, -h

### `poetry` (https://python-poetry.org/docs/cli/)

- **check**: Flags: --help, --lock, -h
- **env info**: Flags: --full-path, --help, -h
- **env list**: Flags: --full-path, --help, -h
- **show**: Flags: --all, --help, --latest, --no-dev, --outdated, --top-level, --tree, -T, -h, -l, -o. Valued: --why
- Allowed standalone flags: --help, --version, -V, -h

### `prettier` (https://prettier.io/docs/en/cli.html)

- Requires --check, --list-different, -c, -l. - Allowed standalone flags: --check, --list-different, --no-config, --no-editorconfig, --no-semi, --single-quote, --jsx-single-quote, --bracket-same-line, --help, --version, -c, -l
- Allowed valued flags: --config, --ignore-path, --parser, --plugin, --print-width, --tab-width, --trailing-comma, --end-of-line, --prose-wrap

### `printenv` (https://www.gnu.org/software/coreutils/manual/coreutils.html#printenv-invocation)

- Allowed standalone flags: --help, --null, --version, -0, -V, -h
- Bare invocation allowed

### `printf` (https://www.gnu.org/software/coreutils/manual/coreutils.html#printf-invocation)

- Allowed standalone flags: --help, --version, -V, -h

### `procs` (https://github.com/dalance/procs#readme)

- Allowed standalone flags: --help, --no-header, --or, --tree, --version, --watch-interval, -V, -h, -l, -t
- Allowed valued flags: --color, --completion, --config, --gen-completion, --insert, --only, --pager, --sorta, --sortd, --theme, -i, -w
- Bare invocation allowed

### `ps` (https://man7.org/linux/man-pages/man1/ps.1.html)

- Allowed standalone flags: --cumulative, --deselect, --forest, --headers, --help, --info, --no-headers, --version, -A, -C, -H, -L, -M, -N, -S, -T, -V, -Z, -a, -c, -d, -e, -f, -h, -j, -l, -m, -r, -v, -w, -x
- Allowed valued flags: --cols, --columns, --format, --group, --pid, --ppid, --rows, --sid, --sort, --tty, --user, --width, -G, -O, -U, -g, -n, -o, -p, -s, -t, -u
- Bare invocation allowed

### `psql` (https://www.postgresql.org/docs/current/app-psql.html)

- Allowed standalone flags: --help, --version, -V, -h

### `pulumi` (https://www.pulumi.com/docs/cli/)

- **about**: Flags: --help, --json, --transitive, -h
- **config**
- **console**: Flags: --help, -h
- **gen-completion**: Flags: --help, -h
- **logs**: Flags: --follow, --help, --json, -f, -h. Valued: --resource, --since, --stack, -r, -s
- **preview**: Flags: --diff, --help, --json, --non-interactive, --refresh, --show-config, --show-reads, --show-replacement-steps, --show-sames, --suppress-outputs, --suppress-permalink, -h, -j. Valued: --config, --config-file, --parallel, --stack, --target, -c, -p, -s, -t
- **schema check**: Flags: --help, -h
- **stack graph**: Flags: --help, -h. Valued: --dependency-edge-color, --parent-edge-color, --stack, -s
- **stack history**: Flags: --help, --json, --show-secrets, -h. Valued: --page, --page-size, --stack, -s
- **stack ls**: Flags: --all, --help, --json, -a, -h. Valued: --organization, --project, --tag, -o
- **stack output**: Flags: --help, --json, --show-secrets, -h, -j. Valued: --stack, -s
- **stack tag**: Flags: --help, -h
- **version**
- **whoami**: Flags: --help, --json, -h
- Allowed standalone flags: --help, -h

### `pup` (https://github.com/ericchiang/pup)

- Allowed standalone flags: --charset, --color, --help, --number, --plain, --version, -c, -h, -n, -p
- Allowed valued flags: --file, -f
- Bare invocation allowed
- Hyphen-prefixed positional arguments accepted

### `pwd` (https://www.gnu.org/software/coreutils/manual/coreutils.html#pwd-invocation)

- Allowed standalone flags: --help, --version, -L, -P, -V, -h
- Bare invocation allowed

### `pyenv` (https://github.com/pyenv/pyenv#readme)

- **help**: Flags: --bare, --help, -h
- **root**: Flags: --bare, --help, -h
- **shims**: Flags: --bare, --help, -h
- **version**: Flags: --bare, --help, -h
- **versions**: Flags: --bare, --help, -h
- **which**: Flags: --bare, --help, -h
- Allowed standalone flags: --help, --version, -V, -h

### `pylint` (https://pylint.readthedocs.io/en/latest/user_guide/usage/run.html)

- Allowed standalone flags: --errors-only, --help, --list-msgs, --list-msgs-enabled, --long-help, --persistent, --py-version, --recursive, --verbose, --version, -E, -V, -h, -v
- Allowed valued flags: --disable, --enable, --extension-pkg-allow-list, --fail-under, --generated-members, --ignore, --ignore-paths, --ignore-patterns, --jobs, --load-plugins, --max-line-length, --msg-template, --output-format, --rcfile, --reports, -d, -e, -f, -j

### `pyright` (https://github.com/microsoft/pyright)

- Allowed standalone flags: --dependencies, --help, --lib, --outputjson, --skipunannotated, --stats, --verbose, --version, --warnings, -h
- Allowed valued flags: --exclude, --ignore, --level, --project, --pythonpath, --pythonplatform, --pythonversion, --threads, --typeshedpath, --verifytypes, -p
- Bare invocation allowed

### `pytest` (https://docs.pytest.org/)

- Allowed standalone flags: --cache-clear, --cache-show, --co, --collect-only, --doctest-modules, --help, --last-failed, --lf, --markers, --new-first, --nf, --no-header, --quiet, --showlocals, --stepwise, --strict-markers, --verbose, --version, -h, -l, -q, -v, -x
- Allowed valued flags: --basetemp, --color, --confcutdir, --deselect, --durations, --ignore, --import-mode, --junitxml, --log-cli-level, --maxfail, --override-ini, --rootdir, --timeout, -c, -k, -m, -o, -p, -r, -W
- Bare invocation allowed

### `python3` (https://docs.python.org/3/using/cmdline.html)

Aliases: `python`

- Allowed standalone flags: --help, --version, -V, -h

### `qemu-img` (https://www.qemu.org/docs/master/tools/qemu-img.html)

- **check**: Flags: --force-share, --help, --image-opts, --quiet, -U, -h, -q. Valued: --cache, --format, --object, --output, -T, -f
- **compare**: Flags: --force-share, --help, --image-opts, --progress, --quiet, --strict, -U, -h, -p, -q, -s. Valued: --a-format, --b-format, --cache, --object, -F, -T, -f
- **info**: Flags: --backing-chain, --force-share, --help, --image-opts, --limits, -U, -h. Valued: --cache, --format, --object, --output, -f, -t
- **map**: Flags: --force-share, --help, --image-opts, -U, -h. Valued: --format, --max-length, --object, --output, --start-offset, -f, -l, -s
- **measure**: Flags: --force-share, --help, --image-opts, -U, -h. Valued: --format, --object, --output, --size, --snapshot, --target-format, -O, -f, -l, -o, -s
- **snapshot**: Flags: --force-share, --help, --image-opts, --list, --quiet, -U, -h, -l, -q. Valued: --format, --object, -f
- Allowed standalone flags: --help, --version, -V, -h

### `qsv` (https://github.com/jqnatividad/qsv)

- Allowed standalone flags: --envlist, --help, --list, --update, --version, -h
- Hyphen-prefixed positional arguments accepted

### `R` (https://cran.r-project.org/manuals.html)

- **CMD check**: Flags: --as-cran, --no-build-vignettes, --no-examples, --no-manual, --no-tests, --no-vignettes. Valued: --output, -o
- **CMD config**

### `railway` (https://docs.railway.app/guides/cli)

- **completion**: Flags: --help, -h
- **list**: Flags: --help, -h
- **logs**: Flags: --help, -h. Valued: --deployment
- **status**: Flags: --help, --json, -h
- **variables list**: Flags: --help, -h
- **version**
- **volume list**: Flags: --help, -h
- **whoami**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -h

### `rbenv` (https://github.com/rbenv/rbenv#readme)

- **help**: Flags: --help, -h
- **root**: Flags: --help, -h
- **shims**: Flags: --help, -h
- **version**: Flags: --help, -h
- **versions**: Flags: --help, -h
- **which**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -V, -h

### `read` (https://pubs.opengroup.org/onlinepubs/9799919799/utilities/read.html)

- Allowed standalone flags: -r, -s
- Allowed valued flags: -a, -d, -n, -p, -t, -u
- Bare invocation allowed
- Hyphen-prefixed positional arguments accepted

### `readelf` (https://man7.org/linux/man-pages/man1/readelf.1.html)

- Allowed standalone flags: --all, --arch-specific, --archive-index, --debug-dump, --dynamic, --file-header, --headers, --help, --histogram, --notes, --program-headers, --relocs, --section-headers, --segments, --symbols, --syms, --unwind, --version, --version-info, --wide, -A, -I, -S, -V, -W, -a, -d, -e, -g, -h, -l, -n, -p, -r, -s, -u
- Allowed valued flags: --decompress, --dwarf-depth, --dwarf-start, --hex-dump, --relocated-dump, --section-details, --string-dump, -D, -R, -w, -x, -z

### `readlink` (https://www.gnu.org/software/coreutils/manual/coreutils.html#readlink-invocation)

- Allowed standalone flags: --canonicalize, --canonicalize-existing, --canonicalize-missing, --help, --no-newline, --verbose, --version, --zero, -V, -e, -f, -h, -m, -n, -v, -z

### `realpath` (https://www.gnu.org/software/coreutils/manual/coreutils.html#realpath-invocation)

- Allowed standalone flags: --canonicalize-existing, --canonicalize-missing, --help, --logical, --no-symlinks, --physical, --quiet, --strip, --version, --zero, -L, -P, -V, -e, -h, -m, -q, -s, -z
- Allowed valued flags: --relative-base, --relative-to

### `rev` (https://man7.org/linux/man-pages/man1/rev.1.html)

- Allowed standalone flags: -V, -h, --help, --version
- Bare invocation allowed

### `rg` (https://github.com/BurntSushi/ripgrep/blob/master/GUIDE.md)

- Allowed standalone flags: --binary, --block-buffered, --byte-offset, --case-sensitive, --column, --count, --count-matches, --crlf, --debug, --files, --files-with-matches, --files-without-match, --fixed-strings, --follow, --glob-case-insensitive, --heading, --help, --hidden, --ignore-case, --ignore-file-case-insensitive, --include-zero, --invert-match, --json, --line-buffered, --line-number, --line-regexp, --max-columns-preview, --mmap, --multiline, --multiline-dotall, --no-config, --no-filename, --no-heading, --no-ignore, --no-ignore-dot, --no-ignore-exclude, --no-ignore-files, --no-ignore-global, --no-ignore-messages, --no-ignore-parent, --no-ignore-vcs, --no-line-number, --no-messages, --no-mmap, --no-pcre2-unicode, --no-require-git, --no-unicode, --null, --null-data, --one-file-system, --only-matching, --passthru, --pcre2, --pcre2-version, --pretty, --quiet, --search-zip, --smart-case, --sort-files, --stats, --text, --trim, --type-list, --unicode, --unrestricted, --version, --vimgrep, --with-filename, --word-regexp, -F, -H, -I, -L, -N, -P, -S, -U, -V, -a, -b, -c, -h, -i, -l, -n, -o, -p, -q, -s, -u, -v, -w, -x, -z
- Allowed valued flags: --after-context, --before-context, --color, --colors, --context, --context-separator, --dfa-size-limit, --encoding, --engine, --field-context-separator, --field-match-separator, --file, --glob, --iglob, --ignore-file, --max-columns, --max-count, --max-depth, --max-filesize, --path-separator, --regex-size-limit, --regexp, --replace, --sort, --sortr, --threads, --type, --type-add, --type-clear, --type-not, -A, -B, -C, -E, -M, -T, -e, -f, -g, -j, -m, -r, -t

### `ri` (https://ruby.github.io/rdoc/RI_md.html)

- Allowed standalone flags: --all, --interactive, --list, --no-pager, -a, -i, -l
- Allowed valued flags: --format, --width, -f, -w
- Bare invocation allowed

### `route` (https://man7.org/linux/man-pages/man8/route.8.html)

- Allowed subcommands: get, monitor, print, show
- Allowed flags: -4, -6, -n, -v
- Bare invocation allowed

### `Rscript` (https://cran.r-project.org/manuals.html)

- Allowed standalone flags: --help, --version, -V, -h

### `rubocop` (https://docs.rubocop.org/rubocop/usage/basic_usage.html)

- Allowed standalone flags: --color, --debug, --display-cop-names, --display-only-correctable, --display-only-safe-correctable, --display-style-guide, --extra-details, --help, --lint, --list-target-files, --no-color, --parallel, --show-cops, --show-docs-url, --version, -L, -V, -d, -h, -l
- Allowed valued flags: --cache-root, --config, --disable-pending-cops, --enable-pending-cops, --except, --exclude-limit, --fail-level, --format, --only, --out, --require, --stdin, -P, -c, -f, -o, -r
- Bare invocation allowed

### `ruby` (https://www.ruby-lang.org/en/documentation/)

- Allowed standalone flags: --help, --version, -V, -h, -v

### `ruff` (https://docs.astral.sh/ruff/)

- **check**: Flags: --help, --no-fix, --quiet, --show-files, --show-settings, --statistics, --verbose, --watch, -e, -h, -q, -v. Valued: --config, --exclude, --extend-exclude, --extend-select, --ignore, --line-length, --output-format, --select, --target-version
- **config**: Flags: --help, -h
- **format** (requires --check): Flags: --check, --diff, --help, --quiet, --verbose, -h, -q, -v. Valued: --config, --exclude, --extend-exclude, --line-length, --target-version
- **rule**: Flags: --all, --help, --output-format, -h
- **version**: Flags: --help, --output-format, -h
- Allowed standalone flags: --help, --version, -V, -h

### `rustc` (https://doc.rust-lang.org/rustc/)

- Allowed standalone flags: --help, --version, -V, -h

### `rustup` (https://rust-lang.github.io/rustup/)

- **component list**: Flags: --help, --installed, -h, -v. Valued: --toolchain
- **doc**: Flags: --alloc, --book, --cargo, --core, --edition-guide, --embedded-book, --help, --nomicon, --path, --proc_macro, --reference, --rust-by-example, --rustc, --rustdoc, --std, --test, --unstable-book, -h. Valued: --toolchain
- **show**: Flags: --help, --installed, -h, -v
- **target list**: Flags: --help, --installed, -h, -v. Valued: --toolchain
- **toolchain list**: Flags: --help, --installed, -h, -v. Valued: --toolchain
- **which**: Flags: --help, -h. Valued: --toolchain
- Allowed standalone flags: --help, --version, -V, -h

### `safe-chains` (https://github.com/michaeldhopkins/safe-chains#readme)

- Bare invocation allowed
- Hyphen-prefixed positional arguments accepted

### `scw` (https://github.com/scaleway/scaleway-cli)

- **account project**: Allowed arguments: list
- **dns record**: Allowed arguments: list
- **dns zone**: Allowed arguments: list
- **instance image**: Allowed arguments: list, get
- **instance ip**: Allowed arguments: list, get
- **instance security-group**: Allowed arguments: list, get
- **instance server**: Allowed arguments: list, get
- **instance snapshot**: Allowed arguments: list, get
- **instance volume**: Allowed arguments: list, get
- **k8s cluster**: Allowed arguments: list, get
- **k8s pool**: Allowed arguments: list, get
- **lb lb**: Allowed arguments: list, get
- **rdb instance**: Allowed arguments: list, get
- **registry image**: Allowed arguments: list
- **registry namespace**: Allowed arguments: list
- **vpc private-network**: Allowed arguments: list
- Allowed standalone flags: --help, -h

### `sdkmanager` (https://developer.android.com/tools/sdkmanager)

- Allowed standalone flags: --help, --list, --version, -V, -h
- Allowed valued flags: --channel, --sdk_root

### `security` (https://ss64.com/mac/security.html)

- **cms**: Flags: --help, -h
- **dump-keychain**: Flags: --help, -h
- **dump-trust-settings**: Flags: --help, -h
- **find-certificate**: Flags: --help, -Z, -a, -h, -p. Valued: -c, -e
- **find-generic-password**: Flags: --help, -h. Valued: -D, -a, -c, -d, -j, -l, -r, -s, -t
- **find-identity**: Flags: --help, -h, -v. Valued: -p, -s
- **find-internet-password**: Flags: --help, -h. Valued: -D, -a, -c, -d, -j, -l, -r, -s, -t
- **list-keychains**: Flags: --help, -d, -h
- **show-keychain-info**: Flags: --help, -h
- **smartcard**: Flags: --help, -h
- **verify-cert**: Flags: --help, -L, -h, -l, -q. Valued: -c, -k, -n, -p, -r
- Allowed standalone flags: --help, --version, -V, -h

### `sed` (https://www.gnu.org/software/sed/manual/sed.html)

- Allowed standalone flags: --debug, --help, --posix, --quiet, --sandbox, --silent, --unbuffered, --version, -E, -V, -h, -n, -r, -u, -z
- Allowed valued flags: --expression, --file, --line-length, -e, -f, -l
- Inline expressions validated for safety

### `selecta` (https://github.com/garybernhardt/selecta)

- Allowed standalone flags: --help, --version, -h, -v
- Allowed valued flags: --search, -s
- Bare invocation allowed

### `semgrep` (https://semgrep.dev/docs/cli-reference/)

- **ci**: Flags: --debug, --dryrun, --help, --json, --quiet, --sarif, --text, --verbose, -h, -q. Valued: --config, --exclude, --include, --metrics, --output, -c, -o
- **scan**: Flags: --debug, --dryrun, --emacs, --error, --help, --json, --junit-xml, --no-autofix, --no-git-ignore, --no-rewrite-rule-ids, --quiet, --sarif, --strict, --text, --time, --verbose, --vim, -e, -h, -q, -v. Valued: --config, --exclude, --include, --lang, --max-target-bytes, --metrics, --output, --pattern, --timeout, -c, -f, -l, -o
- Allowed standalone flags: --help, --version, -h

### `seq` (https://www.gnu.org/software/coreutils/manual/coreutils.html#seq-invocation)

- Allowed standalone flags: --equal-width, --help, --version, -V, -h, -w
- Allowed valued flags: --format, --separator, -f, -s, -t

### `sha1sum` (https://www.gnu.org/software/coreutils/manual/coreutils.html#sha1sum-invocation)

- Allowed standalone flags: --binary, --check, --help, --ignore-missing, --quiet, --status, --strict, --tag, --text, --version, --warn, --zero, -V, -b, -c, -h, -t, -w, -z
- Bare invocation allowed

### `sha256sum` (https://www.gnu.org/software/coreutils/manual/coreutils.html#sha2-utilities)

- Allowed standalone flags: --binary, --check, --help, --ignore-missing, --quiet, --status, --strict, --tag, --text, --version, --warn, --zero, -V, -b, -c, -h, -t, -w, -z
- Bare invocation allowed

### `sha512sum` (https://www.gnu.org/software/coreutils/manual/coreutils.html#sha2-utilities)

- Allowed standalone flags: --binary, --check, --help, --ignore-missing, --quiet, --status, --strict, --tag, --text, --version, --warn, --zero, -V, -b, -c, -h, -t, -w, -z
- Bare invocation allowed

### `shasum` (https://perldoc.perl.org/shasum)

- Allowed standalone flags: --binary, --check, --help, --portable, --status, --strict, --tag, --text, --version, --warn, -0, -V, -b, -c, -h, -p, -s, -t
- Allowed valued flags: --algorithm, -a
- Bare invocation allowed

### `shellcheck` (https://www.shellcheck.net/wiki/)

- Allowed standalone flags: --color, --external-sources, --help, --list-optional, --norc, --severity, --version, --wiki-link-count, -C, -V, -a, -h, -x
- Allowed valued flags: --enable, --exclude, --format, --include, --rcfile, --severity, --shell, --source-path, --wiki-link-count, -P, -S, -W, -e, -f, -i, -o, -s

### `shuf` (https://www.gnu.org/software/coreutils/manual/coreutils.html#shuf-invocation)

- Allowed standalone flags: --echo, --help, --repeat, --version, --zero-terminated, -V, -e, -h, -r, -z
- Allowed valued flags: --head-count, --input-range, --random-source, -i, -n
- Bare invocation allowed

### `simctl` (https://developer.apple.com/documentation/xcode/simctl)

- **list**: Flags: --help, --json, --verbose, -h, -j, -v

### `sips` (https://ss64.com/mac/sips.html)

- Allowed standalone flags: -V, -h, --help, --version
- Allowed valued flags: -g, --getProperty

### `size` (https://man7.org/linux/man-pages/man1/size.1.html)

- Allowed standalone flags: -A, -B, -G, -V, -d, -h, -o, -t, -x, --common, --help, --totals, --version
- Allowed valued flags: --format, --radix, --target

### `sk` (https://github.com/lotabout/skim)

- Fuzzy finder. Display, filtering, and layout flags allowed. --history allowed (SafeWrite).

### `skopeo` (https://github.com/containers/skopeo)

- **inspect**: Flags: --config, --help, --no-creds, --raw, -h. Valued: --authfile, --cert-dir, --creds, --format, --tls-verify
- **list-tags**: Flags: --help, --no-creds, -h. Valued: --authfile, --cert-dir, --creds, --tls-verify
- **manifest-digest**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -h

### `sleep` (https://www.gnu.org/software/coreutils/manual/coreutils.html#sleep-invocation)

- Allowed standalone flags: --help, --version, -V, -h

### `snyk` (https://docs.snyk.io/snyk-cli)

- **code test**: Flags: --help, --json, --sarif, --severity-threshold, -h. Valued: --org. Positional args accepted
- **container test**: Flags: --help, --json, --severity-threshold, -h. Valued: --exclude-base-image-vulns, --file, --org, --platform. Positional args accepted
- **iac test**: Flags: --help, --json, --sarif, --scan, --severity-threshold, -h. Valued: --detection-depth, --org, --rules, --target-name. Positional args accepted
- **test**: Flags: --all-projects, --all-sub-projects, --detection-depth, --dev, --fail-on, --help, --json, --print-deps, --prune-repeated-subdependencies, --sarif, --scan-all-unmanaged, --severity-threshold, --strict-out-of-sync, -h. Valued: --command, --configuration-attributes, --configuration-matching, --exclude, --file, --org, --package-manager, --packages-folder, --project-name, --reachable, --reachable-timeout, --severity-threshold, --sub-project, --target-reference. Positional args accepted
- **version**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -h

### `sort` (https://www.gnu.org/software/coreutils/manual/coreutils.html#sort-invocation)

- Allowed standalone flags: --check, --debug, --dictionary-order, --general-numeric-sort, --help, --human-numeric-sort, --ignore-case, --ignore-leading-blanks, --ignore-nonprinting, --merge, --month-sort, --numeric-sort, --random-sort, --reverse, --stable, --unique, --version, --version-sort, --zero-terminated, -C, -M, -R, -V, -b, -c, -d, -f, -g, -h, -i, -m, -n, -r, -s, -u, -z
- Allowed valued flags: --batch-size, --buffer-size, --field-separator, --files0-from, --key, --parallel, --random-source, --sort, --temporary-directory, -S, -T, -k, -t
- Bare invocation allowed

### `spctl` (https://ss64.com/mac/spctl.html)

- Requires --assess, -a. - Allowed standalone flags: --assess, --verbose, -a, -v, --help, -h
- Allowed valued flags: --context, --type, -t

### `ss` (https://man7.org/linux/man-pages/man8/ss.8.html)

- Allowed standalone flags: --all, --dccp, --extended, --family, --help, --info, --ipv4, --ipv6, --listening, --memory, --no-header, --numeric, --oneline, --options, --packet, --processes, --raw, --resolve, --sctp, --summary, --tcp, --tipc, --udp, --unix, --version, --vsock, -0, -4, -6, -E, -H, -O, -V, -a, -e, -h, -i, -l, -m, -n, -o, -p, -r, -s, -t, -u, -w, -x
- Allowed valued flags: --filter, --query, -A, -F, -f
- Bare invocation allowed

### `stat` (https://www.gnu.org/software/coreutils/manual/coreutils.html#stat-invocation)

- Allowed standalone flags: --dereference, --file-system, --help, --terse, --version, -F, -L, -V, -h, -l, -n, -q, -r, -s, -x
- Allowed valued flags: --format, --printf, -c, -f, -t

### `staticcheck` (https://staticcheck.dev/)

- Allowed standalone flags: --debug.version, --help, --json, --matrix, --merge, --show-ignored, --tests, -f
- Allowed valued flags: -checks, -explain, -fail, -go, -tags

### `stern` (https://github.com/stern/stern)

- Allowed standalone flags: --all-namespaces, --color, --diff-container, --ephemeral-containers, --help, --include-hidden, --init-containers, --no-follow, --only-log-lines, --timestamps, --version, -A, -h
- Allowed valued flags: --container, --container-state, --context, --exclude, --exclude-container, --exclude-pod, --highlight, --include, --kubeconfig, --max-log-requests, --namespace, --node, --output, --selector, --since, --tail, --template, --timezone, -c, -e, -l, -n, -o, -s, -t
- Hyphen-prefixed positional arguments accepted

### `strings` (https://man7.org/linux/man-pages/man1/strings.1.html)

- Allowed standalone flags: -V, -a, -f, -h, -w, --all, --help, --include-all-whitespace, --print-file-name, --version
- Allowed valued flags: -T, -e, -n, -o, -s, -t, --bytes, --encoding, --output-separator, --radix, --target

### `stylelint` (https://stylelint.io/user-guide/cli/)

- Allowed standalone flags: --allow-empty-input, --cache, --color, --disable-default-ignores, --help, --no-color, --quiet, --version, -h, -q
- Allowed valued flags: --config, --config-basedir, --custom-formatter, --custom-syntax, --formatter, --ignore-path, --ignore-pattern, --max-warnings, --output-file, --report-descriptionless-disables, --report-invalid-scope-disables, --report-needless-disables, -f, -o

### `sum` (https://www.gnu.org/software/coreutils/manual/coreutils.html#sum-invocation)

- Allowed standalone flags: --help, --sysv, --version, -V, -h, -r, -s
- Bare invocation allowed

### `sw_vers` (https://ss64.com/mac/sw_vers.html)

- Allowed standalone flags: --buildVersion, --help, --productName, --productVersion, --productVersionExtra, --version, -V, -h
- Bare invocation allowed

### `swift` (https://www.swift.org/documentation/swift-compiler/)

- **build**: Flags: --enable-code-coverage, --help, --show-bin-path, --skip-update, --static-swift-stdlib, --verbose, -h, -v. Valued: --arch, --build-path, --configuration, --jobs, --package-path, --product, --sanitize, --swift-sdk, --target, --triple, -c, -j
- **package describe**: Flags: --help, -h. Valued: --package-path, --type
- **package dump-package**: Flags: --help, -h. Valued: --package-path
- **package show-dependencies**: Flags: --help, -h. Valued: --format, --package-path
- **test**: Flags: --enable-code-coverage, --help, --list-tests, --parallel, --show-codecov-path, --skip-build, --skip-update, --verbose, -h, -l, -v. Valued: --arch, --build-path, --configuration, --filter, --jobs, --num-workers, --package-path, --sanitize, --skip-tests, --swift-sdk, --target, --triple, --xunit-output, -c, -j
- Allowed standalone flags: --help, --version, -V, -h

### `swiftformat` (https://github.com/nicklockwood/SwiftFormat)

- Requires --dryrun, --lint. - Allowed standalone flags: --dryrun, --lenient, --lint, --quiet, --strict, --verbose, --help, -h
- Allowed valued flags: --config, --disable, --enable, --rules

### `swiftlint` (https://github.com/realm/SwiftLint)

- **analyze**: Flags: --help, --quiet, --strict, -h. Valued: --compiler-log-path, --config, --path, --reporter
- **lint**: Flags: --help, --no-cache, --quiet, --strict, -h. Valued: --config, --path, --reporter
- **reporters**: Flags: --help, -h
- **rules**: Flags: --disabled, --enabled, --help, -h. Valued: --config, --reporter
- **version**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -V, -h

### `syft` (https://github.com/anchore/syft)

- Allowed standalone flags: --help, --quiet, --verbose, --version, -h, -q, -v
- Allowed valued flags: --config, --exclude, --file, --from, --name, --output, --platform, --scope, --source-name, --source-version, -c, -o
- Hyphen-prefixed positional arguments accepted

### `sysctl` (https://man7.org/linux/man-pages/man8/sysctl.8.html)



### `system_profiler` (https://ss64.com/mac/system_profiler.html)

- Allowed standalone flags: --help, --json, --version, --xml, -V, -h, -json, -listDataTypes, -nospinner, -xml
- Allowed valued flags: -detailLevel, -timeout
- Bare invocation allowed

### `systemctl` (https://man7.org/linux/man-pages/man1/systemctl.1.html)

- **cat**: Flags: --help, --no-pager, -h. Positional args accepted
- **is-active**: Flags: --help, --quiet, -h, -q. Positional args accepted
- **is-enabled**: Flags: --help, --quiet, -h, -q. Positional args accepted
- **is-failed**: Flags: --help, --quiet, -h, -q. Positional args accepted
- **list-dependencies**: Flags: --all, --help, --no-pager, --plain, --reverse, -a, -h
- **list-sockets**: Flags: --all, --full, --help, --no-legend, --no-pager, --show-types, -a, -h, -l
- **list-timers**: Flags: --all, --full, --help, --no-legend, --no-pager, -a, -h, -l
- **list-unit-files**: Flags: --all, --full, --help, --no-legend, --no-pager, -a, -h, -l. Valued: --state, --type, -t
- **list-units**: Flags: --all, --failed, --full, --help, --no-legend, --no-pager, --plain, --recursive, -a, -h, -l, -r. Valued: --state, --type, -t
- **show**: Flags: --all, --help, --no-pager, -a, -h. Valued: --property, -p. Positional args accepted
- **status**: Flags: --all, --full, --help, --lines, --no-pager, -a, -h, -l. Valued: -n, --output, -o. Positional args accepted
- Allowed standalone flags: --help, --version, -h

### `tac` (https://www.gnu.org/software/coreutils/manual/coreutils.html#tac-invocation)

- Allowed standalone flags: -V, -b, -h, -r, --before, --help, --regex, --version
- Allowed valued flags: -s, --separator
- Bare invocation allowed

### `tail` (https://www.gnu.org/software/coreutils/manual/coreutils.html#tail-invocation)

- Allowed standalone flags: -0, -1, -2, -3, -4, -5, -6, -7, -8, -9, -F, -V, -f, -h, -q, -r, -v, -z, --follow, --help, --quiet, --retry, --silent, --verbose, --version, --zero-terminated
- Allowed valued flags: -b, -c, -n, --bytes, --lines, --max-unchanged-stats, --pid, --sleep-interval
- Bare invocation allowed

### `tailscale` (https://tailscale.com/kb/1080/cli)

- **bugreport**: Flags: --help, -h
- **dns query**: Flags: --help, -h. Positional args accepted
- **dns status**: Flags: --help, -h
- **down**: Flags: --help, -h
- **exit-node list**: Flags: --help, --json, -h. Valued: --filter
- **exit-node suggest**: Flags: --help, -h
- **ip**: Flags: --1, --4, --6, --help, -h
- **licenses**: Flags: --help, -h
- **login**: Flags: --accept-dns, --accept-routes, --help, --shields-up, -h. Valued: --advertise-exit-node, --advertise-routes, --advertise-tags, --authkey, --exit-node, --hostname, --login-server, --operator, --timeout
- **logout**: Flags: --help, -h
- **netcheck**: Flags: --help, -h
- **ping**: Flags: --c2c, --help, --icmp, --peerapi, --tsmp, --until-direct, --verbose, -h. Valued: --size, --timeout
- **status**: Flags: --active, --browser, --help, --json, --peers, --self, --web, -h
- **switch**: Flags: --help, --list, -h
- **up**: Flags: --accept-dns, --accept-routes, --help, --reset, --shields-up, -h. Valued: --advertise-exit-node, --advertise-routes, --advertise-tags, --authkey, --exit-node, --exit-node-allow-lan-access, --hostname, --login-server, --operator, --timeout
- **version**: Flags: --help, -h. Positional args accepted
- **whois**: Flags: --help, --json, -h
- Allowed standalone flags: --help, --version, -h

### `tar` (https://man7.org/linux/man-pages/man1/tar.1.html)

- Listing mode only (requires -t or --list). Old-style flags accepted (e.g. tar tf, tar tzf).
- Flags: -f, -j, -J, -v, -z, -O, --bzip2, --file, --gzip, --xz, --zstd.

### `tea` (https://gitea.com/gitea/tea)

- **b list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **b view**: Flags: --comments, --help, -c, -h. Valued: --login, --output, --repo, -R, -l, -o
- **branch list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **branch view**: Flags: --comments, --help, -c, -h. Valued: --login, --output, --repo, -R, -l, -o
- **branches list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **branches view**: Flags: --comments, --help, -c, -h. Valued: --login, --output, --repo, -R, -l, -o
- **i list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **i view**: Flags: --comments, --help, -c, -h. Valued: --login, --output, --repo, -R, -l, -o
- **issue list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **issue view**: Flags: --comments, --help, -c, -h. Valued: --login, --output, --repo, -R, -l, -o
- **issues list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **issues view**: Flags: --comments, --help, -c, -h. Valued: --login, --output, --repo, -R, -l, -o
- **label list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **label view**: Flags: --comments, --help, -c, -h. Valued: --login, --output, --repo, -R, -l, -o
- **labels list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **labels view**: Flags: --comments, --help, -c, -h. Valued: --login, --output, --repo, -R, -l, -o
- **login list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **logins list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **milestone list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **milestone view**: Flags: --comments, --help, -c, -h. Valued: --login, --output, --repo, -R, -l, -o
- **milestones list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **milestones view**: Flags: --comments, --help, -c, -h. Valued: --login, --output, --repo, -R, -l, -o
- **ms list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **ms view**: Flags: --comments, --help, -c, -h. Valued: --login, --output, --repo, -R, -l, -o
- **n list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **n view**: Flags: --comments, --help, -c, -h. Valued: --login, --output, --repo, -R, -l, -o
- **notification list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **notification view**: Flags: --comments, --help, -c, -h. Valued: --login, --output, --repo, -R, -l, -o
- **notifications list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **notifications view**: Flags: --comments, --help, -c, -h. Valued: --login, --output, --repo, -R, -l, -o
- **org list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **org view**: Flags: --comments, --help, -c, -h. Valued: --login, --output, --repo, -R, -l, -o
- **organization list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **organization view**: Flags: --comments, --help, -c, -h. Valued: --login, --output, --repo, -R, -l, -o
- **organizations list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **organizations view**: Flags: --comments, --help, -c, -h. Valued: --login, --output, --repo, -R, -l, -o
- **pr list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **pr view**: Flags: --comments, --help, -c, -h. Valued: --login, --output, --repo, -R, -l, -o
- **pull list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **pull view**: Flags: --comments, --help, -c, -h. Valued: --login, --output, --repo, -R, -l, -o
- **pulls list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **pulls view**: Flags: --comments, --help, -c, -h. Valued: --login, --output, --repo, -R, -l, -o
- **r list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **r view**: Flags: --comments, --help, -c, -h. Valued: --login, --output, --repo, -R, -l, -o
- **release list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **release view**: Flags: --comments, --help, -c, -h. Valued: --login, --output, --repo, -R, -l, -o
- **releases list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **releases view**: Flags: --comments, --help, -c, -h. Valued: --login, --output, --repo, -R, -l, -o
- **repo list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **repo view**: Flags: --comments, --help, -c, -h. Valued: --login, --output, --repo, -R, -l, -o
- **repos list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **repos view**: Flags: --comments, --help, -c, -h. Valued: --login, --output, --repo, -R, -l, -o
- **t list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **t view**: Flags: --comments, --help, -c, -h. Valued: --login, --output, --repo, -R, -l, -o
- **time list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **time view**: Flags: --comments, --help, -c, -h. Valued: --login, --output, --repo, -R, -l, -o
- **times list**: Flags: --help, -h. Valued: --fields, --limit, --login, --output, --page, --repo, --state, -L, -R, -f, -l, -o, -p, -s
- **times view**: Flags: --comments, --help, -c, -h. Valued: --login, --output, --repo, -R, -l, -o
- **whoami**
- Allowed standalone flags: --version, -v

### `terraform` (https://developer.hashicorp.com/terraform/cli/commands)

- **fmt** (requires --check): Flags: --check, --diff, --help, --no-color, --recursive, -h
- **graph**: Flags: --draw-cycles, --help, -h. Valued: --plan, --type
- **output**: Flags: --help, --json, --no-color, --raw, -h. Valued: --state
- **providers**: Flags: --help, -h
- **show**: Flags: --help, --json, --no-color, -h
- **state list**: Flags: --help, -h. Valued: --id, --state
- **state show**: Flags: --help, -h. Valued: --state
- **validate**: Flags: --help, --json, --no-color, -h
- **version**: Flags: --help, --json, -h
- Allowed standalone flags: --help, --version, -V, -h

### `test` (https://www.gnu.org/software/coreutils/manual/coreutils.html#test-invocation)

Aliases: `[`

- Bare invocation allowed
- Hyphen-prefixed positional arguments accepted

### `tig` (https://jonas.github.io/tig/)

- Allowed standalone flags: --all, --date-order, --help, --reverse, --version, -C, -h, -v
- Allowed valued flags: -n
- Bare invocation allowed
- Hyphen-prefixed positional arguments accepted

### `time` (https://man7.org/linux/man-pages/man1/time.1.html)

- Recursively validates the inner command.

### `timeout` (https://www.gnu.org/software/coreutils/manual/coreutils.html#timeout-invocation)

- Recursively validates the inner command.

### `tldr` (https://tldr.sh/)

- Allowed standalone flags: --help, --list, --version, -h, -l, -v
- Allowed valued flags: --language, --platform, -L, -p
- Hyphen-prefixed positional arguments accepted

### `tmux` (https://man7.org/linux/man-pages/man1/tmux.1.html)

- Read-only: list-sessions, list-windows, list-panes, list-clients, list-buffers, list-keys, list-commands, show-options, show-environment, display-message, info, has-session, start-server. Session management (SafeWrite): new-session, kill-session, kill-window, kill-pane, kill-server, attach-session, detach-client, switch-client, new-window, split-window, select-window, select-pane, rename-session, rename-window, resize-pane, resize-window, set-option, set-environment, send-keys. Delegation: run-shell, if-shell, pipe-pane, confirm-before (recursively validates inner commands).

### `todoist` (https://github.com/Doist/todoist-cli)

Aliases: `td`

- **auth status**: Positional args accepted
- **inbox**: Positional args accepted
- **project list**: Positional args accepted
- **skill list**: Positional args accepted
- **task list**: Positional args accepted
- **task view**: Positional args accepted
- **today**: Positional args accepted
- Allowed standalone flags: --help, --version, -h

### `tokei` (https://github.com/XAMPPRocky/tokei#readme)

- Allowed standalone flags: --compact, --files, --help, --hidden, --no-ignore, --no-ignore-dot, --no-ignore-parent, --no-ignore-vcs, --verbose, --version, -C, -V, -f, -h
- Allowed valued flags: --columns, --exclude, --input, --languages, --num-format, --output, --sort, --type, -c, -e, -i, -l, -o, -s, -t
- Bare invocation allowed

### `tomlq` (https://github.com/kislyuk/yq)

- Allowed standalone flags: --compact-output, --exit-status, --help, --null-input, --raw-input, --raw-output, --slurp, --sort-keys, --tab, --toml-output, --version, -C, -M, -R, -S, -V, -c, -e, -h, -n, -r, -s, -t
- Allowed valued flags: --arg, --argjson, --indent, -f

### `top` (https://man7.org/linux/man-pages/man1/top.1.html)

- Allowed standalone flags: --help, --version, -1, -B, -E, -H, -S, -V, -b, -c, -e, -h, -i
- Allowed valued flags: -F, -O, -U, -d, -f, -l, -n, -o, -p, -s, -u, -w
- Bare invocation allowed

### `tox` (https://tox.wiki/)

- **config**: Flags: --core, --help, -h
- **list**: Flags: --help, --no-desc, -d, -h
- **run**: Flags: --help, --no-recreate-pkg, --skip-missing-interpreters, -h. Valued: -e, -f, --override, --result-json
- Allowed standalone flags: --help, --version, -h

### `tr` (https://www.gnu.org/software/coreutils/manual/coreutils.html#tr-invocation)

- Allowed standalone flags: -C, -V, -c, -d, -h, -s, --complement, --delete, --help, --squeeze-repeats, --truncate-set1, --version

### `traceroute` (https://man7.org/linux/man-pages/man8/traceroute.8.html)

Aliases: `traceroute6`

- Allowed standalone flags: --help, --version, -4, -6, -F, -I, -T, -U, -V, -d, -e, -h, -n, -r, -v
- Allowed valued flags: --port, --queries, --sendwait, --wait, -f, -i, -m, -N, -p, -q, -s, -t, -w, -z

### `tree` (https://man7.org/linux/man-pages/man1/tree.1.html)

- Allowed standalone flags: --dirsfirst, --du, --fromfile, --gitignore, --help, --inodes, --matchdirs, --noreport, --prune, --si, --version, -A, -C, -D, -F, -J, -N, -Q, -S, -V, -X, -a, -d, -f, -g, -h, -i, -l, -n, -p, -q, -r, -s, -t, -u, -v, -x
- Allowed valued flags: --charset, --filelimit, --filesfrom, --sort, --timefmt, -H, -I, -L, -P, -T
- Bare invocation allowed

### `trello` (https://github.com/mheap/trello-cli)

- **board list**: Positional args accepted
- **card list**: Positional args accepted
- **list list**: Positional args accepted
- Allowed standalone flags: --help, --version, -h

### `trivy` (https://aquasecurity.github.io/trivy/)

- **config**: Flags: --help, --json, --quiet, -h, -q. Valued: --exit-code, --format, --ignorefile, --output, --severity, --skip-dirs, --skip-files, --template, -f, -o, -s. Positional args accepted
- **fs**: Flags: --help, --ignore-unfixed, --json, --quiet, --severity, -h, -q. Valued: --cache-dir, --config, --exit-code, --format, --ignorefile, --output, --scanners, --severity, --skip-dirs, --skip-files, --template, --timeout, -f, -o, -s. Positional args accepted
- **image**: Flags: --help, --ignore-unfixed, --json, --quiet, -h, -q. Valued: --cache-dir, --config, --exit-code, --format, --ignorefile, --output, --scanners, --severity, --skip-dirs, --skip-files, --template, --timeout, -f, -o, -s. Positional args accepted
- **sbom**: Flags: --help, --json, --quiet, -h, -q. Valued: --artifact-type, --cache-dir, --format, --output, -f, -o. Positional args accepted
- **version**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -h

### `true` (https://www.gnu.org/software/coreutils/manual/coreutils.html#true-invocation)

- Allowed standalone flags: --help, --version, -V, -h
- Bare invocation allowed

### `tsc` (https://www.typescriptlang.org/docs/handbook/compiler-options.html)

- Requires --help, --noEmit, --version, -h, -v. - Allowed standalone flags: --allowJs, --checkJs, --esModuleInterop, --forceConsistentCasingInFileNames, --help, --incremental, --isolatedModules, --noEmit, --noFallthroughCasesInSwitch, --noImplicitAny, --noImplicitReturns, --noUnusedLocals, --noUnusedParameters, --pretty, --resolveJsonModule, --skipLibCheck, --strict, --strictNullChecks, --version, -h, -v
- Allowed valued flags: --baseUrl, --jsx, --lib, --module, --moduleResolution, --project, --rootDir, --target

### `tty` (https://www.gnu.org/software/coreutils/manual/coreutils.html#tty-invocation)

- Allowed standalone flags: --help, --quiet, --silent, --version, -V, -h, -s
- Bare invocation allowed

### `tuist` (https://docs.tuist.dev/en/cli/)

- **dump**: Flags: --help, --json, --verbose, -h. Valued: --path, -p
- **graph**: Flags: --help, --json, --verbose, -h. Valued: --format, --path, -f, -p
- **hash cache**: Flags: --help, --json, --verbose, -h. Valued: --path, -p
- **hash selective-testing**: Flags: --help, --json, --verbose, -h. Valued: --path, -p
- **inspect build**: Flags: --help, --json, --verbose, -h. Valued: --path, -p
- **inspect bundle**: Flags: --help, --json, --verbose, -h. Valued: --path, -p
- **inspect dependencies**: Flags: --help, --json, --verbose, -h. Valued: --path, -p
- **inspect implicit-imports**: Flags: --help, --json, --verbose, -h. Valued: --path, -p
- **inspect redundant-imports**: Flags: --help, --json, --verbose, -h. Valued: --path, -p
- **inspect test**: Flags: --help, --json, --verbose, -h. Valued: --path, -p
- **migration check-empty-settings**: Flags: --help, -h. Valued: --path, -p
- **migration list-targets**: Flags: --help, -h. Valued: --path, -p
- **scaffold list**: Flags: --help, --json, -h. Valued: --path, -p
- **version**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -V, -h

### `turbo` (https://turbo.build/repo/docs/reference/command-line-reference)

- **daemon status**: Flags: --help, -h
- **ls**: Flags: --affected, --help, -h. Valued: --filter, -F
- **prune**: Flags: --docker, --help, -h. Valued: --out-dir, --scope
- **query**: Flags: --help, -h
- **run**: Flags: --affected, --cache-dir, --continue, --dry-run, --env-mode, --force, --framework-inference, --graph, --help, --no-cache, --no-daemon, --output-logs, --parallel, --summarize, --verbose, -h. Valued: --cache-workers, --color, --concurrency, --env-mode, --filter, --global-deps, --graph, --log-order, --log-prefix, --output-logs, --profile, --remote-only, --scope, --team, --token, -F. Positional args accepted
- Allowed standalone flags: --help, --version, -h

### `type` (https://man7.org/linux/man-pages/man1/type.1p.html)

- Allowed standalone flags: --help, --version, -P, -V, -a, -f, -h, -p, -t

### `uname` (https://www.gnu.org/software/coreutils/manual/coreutils.html#uname-invocation)

- Allowed standalone flags: --all, --help, --kernel-name, --kernel-release, --kernel-version, --machine, --nodename, --operating-system, --processor, --version, -V, -a, -h, -m, -n, -o, -p, -r, -s, -v
- Bare invocation allowed

### `unexpand` (https://www.gnu.org/software/coreutils/manual/coreutils.html#unexpand-invocation)

- Allowed standalone flags: -V, -a, -h, --all, --first-only, --help, --version
- Allowed valued flags: -t, --tabs
- Bare invocation allowed

### `uniq` (https://www.gnu.org/software/coreutils/manual/coreutils.html#uniq-invocation)

- Allowed standalone flags: -D, -V, -c, -d, -h, -i, -u, -z, --count, --help, --ignore-case, --repeated, --unique, --version, --zero-terminated
- Allowed valued flags: -f, -s, -w, --all-repeated, --check-chars, --group, --skip-chars, --skip-fields
- Bare invocation allowed

### `unset` (https://man7.org/linux/man-pages/man1/unset.1p.html)

- Allowed standalone flags: --help, --version, -V, -f, -h, -n, -v
- Bare invocation allowed

### `unzip` (https://linux.die.net/man/1/unzip)

- Requires -l, -t, -Z. - Allowed standalone flags: -1, -2, -C, -M, -T, -Z, -h, -l, -m, -q, -s, -t, -v, -z, --help, --version, -V

### `uptime` (https://www.gnu.org/software/coreutils/manual/coreutils.html#uptime-invocation)

- Allowed standalone flags: --help, --pretty, --since, --version, -V, -h, -p, -s
- Bare invocation allowed

### `uuidgen` (https://man7.org/linux/man-pages/man1/uuidgen.1.html)

- Allowed standalone flags: --help, --random, --time, --version, -V, -h, -r, -t
- Allowed valued flags: --md5, --name, --namespace, --sha1, -N, -m, -n, -s
- Bare invocation allowed

### `uv` (https://docs.astral.sh/uv/reference/cli/)

- **pip check**: Flags: --help, --verbose, -h, -v. Valued: --python
- **pip freeze**: Flags: --help, --verbose, -h, -v. Valued: --python
- **pip list**: Flags: --editable, --exclude-editable, --help, --outdated, --strict, -h. Valued: --exclude, --format, --python
- **pip show**: Flags: --files, --help, --verbose, -h, -v. Valued: --python
- **python list**: Flags: --help, --verbose, -h, -v. Valued: --python
- **tool list**: Flags: --help, --verbose, -h, -v. Valued: --python
- Allowed standalone flags: --help, --version, -V, -h

### `vagrant` (https://developer.hashicorp.com/vagrant/docs/cli)

- **box list**: Flags: --box-info, --help, -h, -i
- **box outdated**: Flags: --global, --help, -h
- **global-status**: Flags: --help, --machine-readable, --prune, -h
- **plugin list**: Flags: --help, -h
- **port**: Flags: --guest, --help, -h
- **ssh-config**: Flags: --help, -h. Valued: --host
- **status**: Flags: --help, --machine-readable, -h
- **validate**: Flags: --help, -h
- **version**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -h, -v

### `vercel` (https://vercel.com/docs/cli)

- **inspect**: Flags: --help, --json, -h, -j. Valued: --scope, --timeout, -S, -T
- **list**: Flags: --help, --json, -h, -j. Valued: --meta, --next, --scope, -S, -m
- **project ls**: Flags: --help, --json, -h, -j. Valued: --scope, -S
- **whoami**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -V, -h

### `vibe` (https://docs.mistral.ai/mistral-vibe/)

- Allowed standalone flags: --help, --version, -V, -h

### `vitest` (https://vitest.dev/guide/cli.html)

- Allowed standalone flags: --bail, --changed, --coverage, --dom, --globals, --help, --hideSkippedTests, --no-color, --no-isolate, --passWithNoTests, --reporter, --run, --silent, --ui, --update, --version, --watch, -h, -v
- Allowed valued flags: --color, --config, --dir, --environment, --exclude, --include, --maxConcurrency, --mode, --project, --root, --testTimeout, -c, -r, -t
- Bare invocation allowed

### `vm_stat` (https://ss64.com/mac/vm_stat.html)

- Allowed standalone flags: --help, --version, -V, -h
- Allowed valued flags: -c
- Bare invocation allowed

### `volta` (https://docs.volta.sh/reference)

- **list**: Flags: --current, --default, --help, -c, -d, -h. Valued: --format
- **which**: Flags: --current, --default, --help, -c, -d, -h. Valued: --format
- Allowed standalone flags: --help, --version, -V, -h

### `vultr-cli` (https://github.com/vultr/vultr-cli)

- **account**
- **bare-metal get**: Flags: --help, -h
- **bare-metal list**: Flags: --help, -h
- **block-storage get**: Flags: --help, -h
- **block-storage list**: Flags: --help, -h
- **database get**: Flags: --help, -h
- **database list**: Flags: --help, -h
- **dns domain**: Allowed arguments: list
- **dns record**: Allowed arguments: list
- **firewall group**: Allowed arguments: list
- **firewall rule**: Allowed arguments: list
- **instance get**: Flags: --help, -h
- **instance list**: Flags: --help, -h
- **kubernetes get**: Flags: --help, -h
- **kubernetes list**: Flags: --help, -h
- **os list**: Flags: --help, -h
- **plans list**: Flags: --help, -h
- **regions list**: Flags: --help, -h
- **version**
- Allowed standalone flags: --help, --version, -h, -v

### `w` (https://man7.org/linux/man-pages/man1/w.1.html)

- Allowed standalone flags: --from, --help, --ip-addr, --no-current, --no-header, --old-style, --short, --version, -V, -f, -h, -i, -o, -s, -u
- Bare invocation allowed

### `wait` (https://pubs.opengroup.org/onlinepubs/9799919799/utilities/wait.html)

- Allowed standalone flags: --help, --version, -V, -h
- Bare invocation allowed

### `watchexec` (https://watchexec.github.io/)

- Recursively validates the inner command.

### `wc` (https://www.gnu.org/software/coreutils/manual/coreutils.html#wc-invocation)

- Allowed standalone flags: -L, -V, -c, -h, -l, -m, -w, --bytes, --chars, --help, --lines, --max-line-length, --version, --words, --zero-terminated
- Allowed valued flags: --files0-from
- Bare invocation allowed

### `wg` (https://www.wireguard.com/quickstart/)

- **genkey**: Flags: --help, -h
- **genpsk**: Flags: --help, -h
- **help**: Flags: --help, -h
- **pubkey**: Flags: --help, -h
- **show**: Flags: --help, -h. Positional args accepted
- **showconf**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -h

### `whereis` (https://man7.org/linux/man-pages/man1/whereis.1.html)

- Allowed standalone flags: --help, --version, -V, -b, -h, -l, -m, -s, -u
- Allowed valued flags: -B, -M, -S, -f

### `which` (https://man7.org/linux/man-pages/man1/which.1.html)

- Allowed standalone flags: --all, --help, --version, -V, -a, -h, -s

### `who` (https://www.gnu.org/software/coreutils/manual/coreutils.html#who-invocation)

- Allowed standalone flags: --all, --boot, --count, --dead, --heading, --help, --login, --lookup, --mesg, --message, --process, --runlevel, --short, --time, --users, --version, --writable, -H, -S, -T, -V, -a, -b, -d, -h, -l, -m, -p, -q, -r, -s, -t, -u, -w
- Bare invocation allowed

### `whoami` (https://www.gnu.org/software/coreutils/manual/coreutils.html#whoami-invocation)

- Allowed standalone flags: --help, --version, -V, -h
- Bare invocation allowed

### `whois` (https://man7.org/linux/man-pages/man1/whois.1.html)

- Allowed standalone flags: --help, --version, -A, -B, -G, -H, -I, -K, -L, -M, -Q, -R, -S, -a, -b, -c, -d, -f, -g, -l, -m, -r, -x
- Allowed valued flags: -T, -V, -h, -i, -p, -s, -t

### `workon` (https://github.com/michaeldhopkins/workon)

- Allowed standalone flags: --help, --version, -V, -h
- Bare invocation allowed

### `wrangler` (https://developers.cloudflare.com/workers/wrangler/)

- **complete**: Flags: --help, -h
- **deployments list**: Flags: --help, -h. Valued: --name
- **deployments status**: Flags: --help, -h. Valued: --name
- **docs**: Flags: --help, -h
- **secret list**: Flags: --help, -h. Valued: --env, -e
- **tail**: Flags: --help, -h. Valued: --env, --format, --ip, --method, --sampling-rate, --search, --status, -e
- **telemetry status**: Flags: --help, -h
- **version**
- **versions list**: Flags: --help, -h. Valued: --name
- **versions view**: Flags: --help, -h. Valued: --name
- **whoami**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -h, -v

### `xargs` (https://www.gnu.org/software/findutils/manual/html_mono/find.html#Invoking-xargs)

- Recursively validates the inner command. Skips xargs-specific flags (-I, -L, -n, -P, -s, -E, -d, -0, -r, -t, -p, -x).

### `xcbeautify` (https://github.com/cpisciotta/xcbeautify)

- Allowed standalone flags: --help, --is-ci, --quiet, --quieter, --version, -V, -h, -q
- Allowed valued flags: --renderer
- Bare invocation allowed

### `xcode-select` (https://ss64.com/mac/xcode-select.html)

- Allowed standalone flags: --help, --print-path, --version, -V, -h, -p, -v

### `xcodebuild` (https://developer.apple.com/documentation/xcode/xcodebuild)

- **-list**: Flags: --help, -h, -json. Valued: -project, -workspace
- **-showBuildSettings**: Flags: --help, -h, -json. Valued: -configuration, -destination, -project, -scheme, -sdk, -target, -workspace
- **-showdestinations**: Flags: --help, -h, -json. Valued: -configuration, -destination, -project, -scheme, -sdk, -target, -workspace
- **-showsdks**: Flags: --help, -h, -json. Valued: -configuration, -destination, -project, -scheme, -sdk, -target, -workspace
- **-version**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -V, -h

### `xcodegen` (https://github.com/yonaskolb/XcodeGen)

- **dump**: Flags: --help, --no-env, --quiet, -h, -n, -q. Valued: --project-root, --spec, --type, -r, -s, -t
- **version**: Flags: --help, -h
- Allowed standalone flags: --help, --version, -V, -h

### `xcrun` (https://ss64.com/mac/xcrun.html)

- **--find**: Positional args accepted
- **--show-sdk-build-version**: Positional args accepted
- **--show-sdk-path**: Positional args accepted
- **--show-sdk-platform-path**: Positional args accepted
- **--show-sdk-platform-version**: Positional args accepted
- **--show-sdk-version**: Positional args accepted
- **--show-toolchain-path**: Positional args accepted
- **notarytool history**: Positional args accepted
- **notarytool info**: Positional args accepted
- **notarytool log**: Positional args accepted
- **simctl list**: Positional args accepted
- **stapler validate**: Positional args accepted

### `xmllint` (https://gnome.pages.gitlab.gnome.org/libxml2/xmllint.html)

- Allowed standalone flags: --auto, --catalogs, --compress, --copy, --debug, --debugent, --dropdtd, --format, --help, --html, --htmlout, --huge, --load-trace, --loaddtd, --memory, --noblanks, --nocatalogs, --nocdata, --nocompact, --nodefdtd, --noenc, --noent, --nonet, --noout, --nowarning, --nowrap, --nsclean, --oldxml10, --postvalid, --push, --pushsmall, --quiet, --recover, --repeat, --sax, --sax1, --stream, --testIO, --timing, --valid, --version, --walker, --xinclude, --xmlout, -V, -h
- Allowed valued flags: --dtdvalid, --dtdvalidfpi, --encode, --maxmem, --path, --pattern, --pretty, --relaxng, --schema, --schematron, --xpath

### `xq` (https://github.com/kislyuk/yq)

- Allowed standalone flags: --compact-output, --exit-status, --help, --null-input, --raw-input, --raw-output, --slurp, --sort-keys, --tab, --version, --xml-output, -C, -M, -R, -S, -V, -c, -e, -h, -n, -r, -s, -x
- Allowed valued flags: --arg, --argjson, --indent, --xml-dtd, --xml-item-depth, --xml-root, -f

### `xsv` (https://github.com/BurntSushi/xsv)

- Allowed standalone flags: --help, --version, -h
- Hyphen-prefixed positional arguments accepted

### `xv` (https://github.com/gyscos/xv)

- Allowed standalone flags: -V, -h, --help, --version
- Hyphen-prefixed positional arguments accepted

### `xxd` (https://man7.org/linux/man-pages/man1/xxd.1.html)

- Allowed standalone flags: --autoskip, --bits, --capitalize, --decimal, --ebcdic, --help, --include, --little-endian, --plain, --postscript, --revert, --uppercase, --version, -C, -E, -V, -a, -b, -d, -e, -h, -i, -p, -r, -u
- Allowed valued flags: --color, --cols, --groupsize, --len, --name, --offset, --seek, -R, -c, -g, -l, -n, -o, -s
- Bare invocation allowed

### `yarn` (https://yarnpkg.com/cli)

- **info**: Flags: --help, --json, -h
- **list**: Flags: --help, --json, --long, --production, -h. Valued: --depth, --pattern
- **ls**: Flags: --help, --json, --long, --production, -h. Valued: --depth, --pattern
- **why**: Flags: --help, --json, -h
- Allowed arguments: test, test:*
- Allowed standalone flags: --help, --version, -V, -h

### `yq` (https://mikefarah.gitbook.io/yq)

- Allowed standalone flags: --colors, --exit-status, --help, --no-colors, --no-doc, --null-input, --prettyPrint, --version, -C, -M, -N, -P, -V, -e, -h, -r
- Allowed valued flags: --arg, --argjson, --expression, --front-matter, --indent, --input-format, --output-format, -I, -p

### `zcat` (https://man7.org/linux/man-pages/man1/zcat.1.html)

Aliases: `gzcat`

- Allowed standalone flags: -V, -f, -h, -q, -v, --force, --help, --quiet, --verbose, --version
- Bare invocation allowed

### `zf` (https://github.com/natecraddock/zf)

- Allowed standalone flags: --help, --keep-order, --plain, --version, -0, -h, -k, -p, -v
- Allowed valued flags: --delimiter, --filter, --height, --lines, --preview-width, -d, -f, -l
- Bare invocation allowed

### `zgrep` (https://man7.org/linux/man-pages/man1/zgrep.1.html)

Aliases: `zegrep`, `zfgrep`

- Allowed standalone flags: --count, --extended-regexp, --files-with-matches, --files-without-match, --fixed-strings, --help, --ignore-case, --invert-match, --line-number, --no-filename, --only-matching, --quiet, --silent, --version, --with-filename, --word-regexp, -E, -F, -G, -H, -L, -V, -Z, -c, -h, -i, -l, -n, -o, -q, -s, -v, -w, -x
- Allowed valued flags: --after-context, --before-context, --context, --file, --max-count, --regexp, -A, -B, -C, -e, -f, -m

### `zig` (https://ziglang.org/documentation/)

- Allowed standalone flags: --help, --version

### `zipalign` (https://developer.android.com/tools/zipalign)

- Requires -c. - Allowed standalone flags: -c, -p, -v, --help, -h, --version, -V

### `zipinfo` (https://linux.die.net/man/1/zipinfo)

- Allowed standalone flags: --help, --version, -1, -2, -C, -M, -T, -V, -Z, -h, -l, -m, -s, -t, -v, -z

### `zoxide` (https://github.com/ajeetdsouza/zoxide)

- **query**: Flags: --all, --exclude, --help, --interactive, --list, --score, -a, -h, -i, -l, -s
- Allowed standalone flags: --help, --version, -V, -h