skills.rest
vigolium
vigoliumOFFICIAL
Explore all skills by this author →
Website𝕏@VigoliumGitHub

vigolium-scanner

Execute Vigolium CLI commands for web vulnerability scanning and code review.

965|142|Updated Mar 8, 2026
Search Tags:#CLI automation#DAST#web vulnerability scanning#AI security agent#traffic ingestion#JavaScript extensions#OAST
One-click install
npx skills add https://github.com/vigolium/vigolium --skill vigolium-scanner
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vigolium-scanner
Source: https://github.com/vigolium/vigolium/tree/main/public/skills/vigolium-scanner
Command: npx skills add https://github.com/vigolium/vigolium --skill vigolium-scanner

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Vigolium helps you choose and execute the right command path to perform high-fidelity web vulnerability scanning (native and agentic) without getting lost in complex tooling and workflows.

Core Features & Use Cases

  • Command-first scanning workflows: Use standalone scan commands, phase runners, and command-line options for deterministic scanning.
  • Agentic scanning modes: Run AI-driven scans for code review, endpoint discovery, autonomous attack planning, triage, and iterative rescanning.
  • Traffic ingestion and server operations: Ingest traffic into a database, replay stored requests, and optionally run scan-on-receive for continuous testing.
  • Extension authoring support: Write and run custom JavaScript extensions to add targeted detection logic.

Quick Start

Use vigolium-scanner to run a fast deterministic scan against a target URL by executing: "vigolium scan -t https://example.com --strategy deep --format jsonl -o results.jsonl".

Frequently Asked Questions about vigolium-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a web vulnerability scan against a specific target URL?▼

You can run a web vulnerability scan by executing the CLI command "vigolium scan -t https://example.com --strategy deep --format jsonl" to perform deterministic DAST scanning and output actionable findings.

What is agentic DAST scanning and how does it differ from deterministic scanning?▼

Agentic DAST scanning uses an AI security agent to drive code review, endpoint discovery, autonomous attack planning, and iterative rescanning, whereas deterministic scanning relies on predefined multi-phase command workflows.

Can I use custom JavaScript extensions for targeted web vulnerability detection?▼

Yes, you can write and execute custom JavaScript extensions to add targeted detection logic to your web vulnerability scanning workflow, allowing specialized modules to run against your target.

How does traffic ingestion work for continuous security testing?▼

Traffic ingestion works by capturing requests into a database, replaying stored requests, and optionally running scan-on-receive for continuous security testing through server-based record collection.

Do I need any specific dependencies installed to use the Vigolium scanner?▼

No specific dependencies are required to use the Vigolium scanner, as it operates as a standalone CLI tool for executing native and agentic web vulnerability scanning workflows.

Related Skills

Explore More Software Engineering Skills→
majiayu000majiayu000
12

sage-config-system

Merge Sage configuration from defaults, files, environment variables, and CLI overrides.

Community
Advanced
matteocervellimatteocervelli
25

planning-doc-generator

Generate project assessment Markdown reports from structured JSON data.

Community
Intermediate
dungsnowaxedungsnowaxe

sql-injection-testing

Detect and validate SQL injection vulnerabilities across database types.

Community
Advanced
xotongxotong

appsec-dast-sim

Simulate DAST security testing via static codebase analysis without running the application.

Community
Advanced