vigolium-scanner

Name: vigolium-scanner
Availability: InStock
Author: Vigolium

Execute Vigolium CLI commands for web vulnerability scanning and code review.

965|142|Updated Mar 8, 2026

Search Tags:#CLI automation #DAST #web vulnerability scanning #AI security agent #traffic ingestion #JavaScript extensions #OAST

Ready to run

npx skills add https://github.com/vigolium/vigolium --skill vigolium-scanner

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: vigolium-scanner
Source: https://github.com/vigolium/vigolium/tree/main/public/skills/vigolium-scanner
Command: npx skills add https://github.com/vigolium/vigolium --skill vigolium-scanner

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Vigolium helps you choose and execute the right command path to perform high-fidelity web vulnerability scanning (native and agentic) without getting lost in complex tooling and workflows.

Core Features & Use Cases

Command-first scanning workflows: Use standalone scan commands, phase runners, and command-line options for deterministic scanning.
Agentic scanning modes: Run AI-driven scans for code review, endpoint discovery, autonomous attack planning, triage, and iterative rescanning.
Traffic ingestion and server operations: Ingest traffic into a database, replay stored requests, and optionally run scan-on-receive for continuous testing.
Extension authoring support: Write and run custom JavaScript extensions to add targeted detection logic.

Quick Start

Use vigolium-scanner to run a fast deterministic scan against a target URL by executing: "vigolium scan -t https://example.com --strategy deep --format jsonl -o results.jsonl".

Frequently Asked Questions about vigolium-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I run a web vulnerability scan against a specific target URL?▼

You can run a web vulnerability scan by executing the CLI command "vigolium scan -t https://example.com --strategy deep --format jsonl" to perform deterministic DAST scanning and output actionable findings.

What is agentic DAST scanning and how does it differ from deterministic scanning?▼

Agentic DAST scanning uses an AI security agent to drive code review, endpoint discovery, autonomous attack planning, and iterative rescanning, whereas deterministic scanning relies on predefined multi-phase command workflows.

Can I use custom JavaScript extensions for targeted web vulnerability detection?▼

Yes, you can write and execute custom JavaScript extensions to add targeted detection logic to your web vulnerability scanning workflow, allowing specialized modules to run against your target.

How does traffic ingestion work for continuous security testing?▼

Traffic ingestion works by capturing requests into a database, replaying stored requests, and optionally running scan-on-receive for continuous security testing through server-based record collection.

Do I need any specific dependencies installed to use the Vigolium scanner?▼

No specific dependencies are required to use the Vigolium scanner, as it operates as a standalone CLI tool for executing native and agentic web vulnerability scanning workflows.