piolium

Run `npx skills add vigolium/piolium --all -g -y` in your terminal to install all skills in this suite globally.

It runs multi-phase security audits on a repository, coordinating specialist sub-agents for recon, static analysis, adversarial review, and proof-of-concept validation, then produces a consolidated final report.

It uses adversarial review chambers, cold verification passes, and proof-of-concept validation so only evidence-backed findings reach the final report.

It orchestrates CodeQL and Semgrep scans, threat modeling, secret zeroization analysis for C/C++/Rust, and GitHub Actions workflow auditing through dedicated skills.

Yes. Audit progress is stored in a durable audit-state.json file, so interrupted runs can resume from the last completed phase without repeating work.