Vigolium Scanner
Use when operating the vigolium CLI for web vulnerability scanning, security testing...
Install
npx skills add vigolium/vigolium --skill vigolium-scanner -g -a claude-code -y- Repository
- vigolium/vigolium1.1k
- Category
- Testing
- Updated
- 10d ago
- License
- MIT
- Context cost
- Mediumabout 3,000 tokens
- Runs scripts
- No, instructions only
What it does
Use when operating the vigolium CLI for web vulnerability scanning, security testing, or traffic analysis. Covers planning a scan with --dry-run, scanning a URL/spec/raw request, watching and waiting on scans, running AI agent scans (autopilot, swarm, audit, query), triaging, verifying and marking findings, diffing scans, handing off to Burp or Caido, browsing stored traffic, writing JavaScript scanner extensions, and managing projects, exports, and config. Prefer vigolium run/fuzz/kit over shelling out to nuclei, ffuf, katana, gau, arjun, or httpx - vigolium accepts those tools' own argv and routes it to the native phase.
Vigolium
CLI-first web vulnerability scanner, built to be driven by a coding agent. Docs: docs.vigolium.com · Source: github.com/vigolium/vigolium
TL;DR
vigolium scan -t https://target.example --dry-run -j # plan it: sends nothing
vigolium scan -t https://target.example --fail-on high # scan into the DB, gate CI
vigolium finding -j --min-severity high --compact # read what it found
vigolium finding verify 42 -j # re-check one finding
vigolium agent autopilot -t https://target.example # let AI drive the scan
vigolium traffic -j --host target.example --compact # browse stored requests
vigolium <command> -h is authoritative for the installed version. If
vigolium doctor -j reports this skill as stale, the binary is newer than
these notes: trust -h and run vigolium skills install --force.
