vigolium-scanner

Compare original and translation side by side

🇺🇸

Original

English

🇨🇳

Translation

Chinese

Vigolium CLI

Operator's guide for the Vigolium high-fidelity web vulnerability scanner. Covers every command, flag, workflow pattern, scanning strategy, AI agent modes, and JavaScript extension authoring. Full documentation at docs.vigolium.com.

Vigolium高保真Web漏洞扫描器的操作指南。涵盖所有命令、标志、工作流模式、扫描策略、AI Agent模式以及JavaScript扩展编写方法。完整文档请访问docs.vigolium.com。

Role Definition

角色定义

Vigolium is a CLI-first vulnerability scanner that operates in multiple modes:

Standalone scanner:
```
scan
```
,
```
scan-url
```
,
```
scan-request
```
,
```
run
```
REST API server with traffic ingestion:
```
server
```
,
```
ingest
```
AI agent integration (all dispatch flows through the in-process olium engine — no subprocess SDK backends):
- ```
agent query
```
  — single-shot prompt (template-based or inline) for code review / endpoint discovery
- ```
agent autopilot
```
  — autonomous AI-driven scanning that drives the vigolium CLI
- ```
agent swarm
```
  — AI-guided targeted or full-scope scanning (add
```
--discover
```
  for full-scope)
- ```
agent olium
```
  (alias
```
vigolium olium
```
  /
```
ol
```
  ) — interactive TUI / one-shot olium agent
- ```
agent audit
```
  — unified driver dispatcher driving the embedded vigolium-audit harness and/or piolium (
```
--driver=auto|both|audit|piolium
```
  ; replaces the former
```
agent archon
```
  )
- ```
agent session
```
  — list / inspect agent run sessions
Extension runner:
```
run extension --ext custom-check.js
```
for custom JS scanning logic
JavaScript executor:
```
js
```
for ad-hoc scripting with full
```
vigolium.*
```
API access
Session log viewer:
```
log <uuid>
```
streams
```
runtime.log
```
for native + agentic sessions (tail / follow / DB fallback)
Data import:
```
import <path>
```
ingests audit output folders (
```
vigolium-results/
```
) and JSONL exports
Cloud storage:
```
storage ls/upload/download/rm/presign/results
```
manages per-project objects in the configured bucket
Lifecycle:
```
init
```
sets up
```
~/.vigolium/
```
,
```
config clean
```
wipes it back to a fresh state

Olium provider drivers (set via

agent.olium.provider

--provider

openai-compatible
(default): any OpenAI Chat-Completions-compatible endpoint via
```
agent.olium.custom_provider.base_url
```
/
```
model_id
```
(default points at a local Ollama at
```
http://localhost:11434/v1
```
, model
```
gemma4:latest
```
)
openai-codex-oauth
: OpenAI Codex via
```
~/.codex/auth.json
```
(ChatGPT subscription)

anthropic-api-key
: Anthropic Messages API via

$ANTHROPIC_API_KEY

--llm-api-key

anthropic-oauth
: Anthropic Claude via Claude Code OAuth bearer token (
```
claude setup-token
```
)

openai-api-key
: OpenAI Chat Completions via

$OPENAI_API_KEY

--llm-api-key

anthropic-cli
: Shells out to the local
```
claude
```
CLI binary (Claude Max subscribers)
anthropic-vertex
: Anthropic Claude on GCP Vertex AI via service-account JSON (
```
--oauth-cred
```
/
```
$GOOGLE_APPLICATION_CREDENTIALS
```
); requires a
```
claude-*
```
model (e.g.
```
claude-opus-4-6
```
)
google-vertex
: Gemini-native on GCP Vertex AI via service-account JSON; requires a
```
gemini-*
```
model (e.g.
```
gemini-3.1-pro
```
)

This skill helps you pick the right command, flags, and workflow for any security testing task.

Vigolium是一款优先支持CLI的漏洞扫描器，支持多种运行模式：

独立扫描器：
```
scan
```
,
```
scan-url
```
,
```
scan-request
```
,
```
run
```
带流量采集的REST API服务器：
```
server
```
,
```
ingest
```
AI Agent集成（所有调度流程通过进程内的olium引擎实现——无子进程SDK后端）：
- ```
agent query
```
  — 用于代码审查/端点发现的单次提示（基于模板或内联）
- ```
agent autopilot
```
  — 自主AI驱动的扫描，控制Vigolium CLI
- ```
agent swarm
```
  — AI引导的定向或全范围扫描（添加
```
--discover
```
  启用全范围）
- ```
agent olium
```
  （别名
```
vigolium olium
```
  /
```
ol
```
  ）——交互式TUI/单次olium Agent
- ```
agent audit
```
  — 统一驱动调度器，控制嵌入式vigolium-audit工具和/或piolium（
```
--driver=auto|both|audit|piolium
```
  ；替代原
```
agent archon
```
  命令）
- ```
agent session
```
  — 列出/查看Agent运行会话
扩展运行器：
```
run extension --ext custom-check.js
```
用于自定义JS扫描逻辑
JavaScript执行器：
```
js
```
用于临时脚本编写，可完整访问
```
vigolium.*
```
API
会话日志查看器：
```
log <uuid>
```
流式输出原生+Agent会话的
```
runtime.log
```
（支持尾部查看/实时跟踪/数据库回退）
数据导入：
```
import <path>
```
导入审计输出文件夹（
```
vigolium-results/
```
）和JSONL导出文件
云存储：
```
storage ls/upload/download/rm/presign/results
```
管理配置存储桶中每个项目的对象
生命周期管理：
```
init
```
初始化
```
~/.vigolium/
```
目录，
```
config clean
```
将其重置为初始状态

Olium提供商驱动（通过

agent.olium.provider

或

--provider

设置）：

openai-compatible
（默认）：任何兼容OpenAI Chat-Completions的端点，通过
```
agent.olium.custom_provider.base_url
```
/
```
model_id
```
配置（默认指向本地Ollama，地址
```
http://localhost:11434/v1
```
，模型
```
gemma4:latest
```
）
openai-codex-oauth
：通过
```
~/.codex/auth.json
```
使用OpenAI Codex（需ChatGPT订阅）

anthropic-api-key
：通过

$ANTHROPIC_API_KEY

--llm-api-key

使用Anthropic Messages API

anthropic-oauth
：通过Claude Code OAuth令牌使用Anthropic Claude（执行
```
claude setup-token
```
获取令牌）

openai-api-key
：通过

$OPENAI_API_KEY

--llm-api-key

使用OpenAI Chat Completions

anthropic-cli
：调用本地
```
claude
```
CLI二进制文件（需Claude Max订阅）
anthropic-vertex
：通过服务账户JSON在GCP Vertex AI上使用Anthropic Claude（
```
--oauth-cred
```
/
```
$GOOGLE_APPLICATION_CREDENTIALS
```
）；需使用
```
claude-*
```
模型（例如
```
claude-opus-4-6
```
）
google-vertex
：通过服务账户JSON在GCP Vertex AI上使用原生Gemini；需使用
```
gemini-*
```
模型（例如
```
gemini-3.1-pro
```
）

本指南帮助你为任何安全测试任务选择合适的命令、标志和工作流。

Command Decision Tree

命令决策树

Use this to find the right command quickly:

I need to...	Use
Scan one or more target URLs	`vigolium scan -t <url>`
Scan a single URL with custom method/headers	`vigolium scan-url <url> --method POST --body '...'`
Scan a raw HTTP request from file/stdin	`vigolium scan-request -i request.txt`
Run only one scan phase	`vigolium run <phase>` or `scan --only <phase>`
Run a custom JS extension against a target	`vigolium run extension -t <url> --ext custom-check.js`
Import an OpenAPI/Swagger spec and scan	`vigolium scan -I openapi -i spec.yaml -t <base-url>`
Import Burp/HAR/cURL traffic	`vigolium scan -I burp -i export.xml`
Filter modules by tag	`vigolium scan -t <url> --module-tag spring --module-tag injection`
Ingest traffic into database without scanning	`vigolium ingest -t <url> -I openapi -i spec.yaml`
Start the API server	`vigolium server`
Start server and auto-scan new traffic	`vigolium server -t <url> -S`
Run AI code review on source code	`vigolium agent query --prompt-template security-code-review --source ./src`
Run AI agent with inline prompt	`vigolium agent query 'review this code for vulnerabilities'`
Autonomous AI-driven scanning	`vigolium agent autopilot -t <url>`
Autopilot natural-language prompt	`vigolium agent autopilot "scan VAmPI at ~/src/VAmPI on localhost:3005"`
Autopilot with intensity preset	`vigolium agent autopilot -t <url> --intensity deep`
Autopilot scanning a PR diff	`vigolium agent autopilot -t <url> --source ./src --diff main...feature-branch`
Full-scope AI-driven scan (discovery → plan → scan → triage)	`vigolium agent swarm -t <url> --discover`
Deep targeted vulnerability scan on specific endpoint	`vigolium agent swarm -t <url>`
Swarm natural-language prompt	`vigolium agent swarm "scan source at ~/src/app on localhost:3005"`
Swarm with curl command input	`vigolium agent swarm --input "curl -X POST <url> -d '...'"`
Swarm with source code (route discovery + SAST + code audit)	`vigolium agent swarm -t <url> --source ./src`
Swarm with intensity preset	`vigolium agent swarm -t <url> --intensity quick`
Swarm with background vigolium-audit	`vigolium agent swarm -t <url> --source ./src --audit lite`
Swarm with custom instructions	`vigolium agent swarm -t <url> --instruction "Focus on GraphQL"`
Source analysis only (no scan)	`vigolium agent swarm -t <url> --source ./src --source-analysis-only`
Foreground vigolium-audit (lite/balanced/deep)	`vigolium agent audit --driver=audit --mode deep --source .`
Audit a remote repo	`vigolium agent audit --driver=audit --mode lite --source https://github.com/org/repo`
Confirm PoCs for existing findings	`vigolium agent audit --driver=audit --mode confirm --source ./audit-tree`
Drive the audit yourself interactively	`vigolium agent audit -i --source ./src`
Foreground piolium (Pi-native) audit	`vigolium agent audit --driver=piolium --mode balanced --source .`
Piolium hail-mary file-by-file hunt	`vigolium agent audit --driver=piolium --mode longshot --source ./src --plm-longshot-langs python,go`
Piolium with custom Pi provider/model	`vigolium agent audit --driver=piolium --pi-provider vertex-anthropic --pi-model claude-opus-4-6 --source .`
Run vigolium-audit, fall back to piolium only if no claude/codex CLI	`vigolium agent audit --source .`
Run vigolium-audit + piolium back-to-back unconditionally	`vigolium agent audit --driver=both --source .`
Run only one driver under unified audit	`vigolium agent audit --driver=audit --source .`
Audit from a gs:// archive	`vigolium agent audit --source gs://my-project/snapshots/app.tar.gz`
Interactive olium TUI	`vigolium olium` (alias `vigolium ol` )
One-shot olium prompt to stdout	`vigolium olium -p "explain this codebase"`
Olium via anthropic-vertex (Claude on Vertex)	`vigolium olium --provider anthropic-vertex --gcp-project my-gcp --gcp-location us-east5 --model claude-opus-4-6`
Olium via google-vertex (Gemini-native)	`vigolium olium --provider google-vertex --model gemini-3.1-pro`
Browse stored HTTP traffic	`vigolium traffic` or `vigolium traffic <search>`
Browse findings/vulnerabilities	`vigolium finding` or `vigolium db ls --table findings`
Replay one request with mutations + baseline diff (external-agent confirm step)	`vigolium replay --record-uuid <uuid> -m 'name=id,payload=1 OR 1=1'`
Replay a finding's HTTP evidence with a payload	`vigolium replay --finding-id 42 -m 'name=q,payload=<svg/onload=alert(1)>'`
Replay an arbitrary curl/raw/burp/base64/URL input	`vigolium replay -i "curl -X POST <url> -d '...'"`
Persist cookies across replays (multi-step auth)	`vigolium replay --session-id login --record-uuid <uuid>`
Filter findings by module type or source	`vigolium finding --module-type active --finding-source audit`
View database statistics	`vigolium db stats`
Export results to JSONL/HTML	`vigolium export --format jsonl -o results.jsonl`
Clean database records	`vigolium db clean --host <hostname>`
List available scanner modules	`vigolium module ls` or `vigolium scan -M`
Enable/disable specific modules	`vigolium module enable xss` / `module disable sqli`
Manage JavaScript extensions	`vigolium ext ls` / `ext docs` / `ext preset`
Execute arbitrary JS with vigolium API	`vigolium js --code 'vigolium.http.get("https://example.com")'`
Execute JS from a file	`vigolium js --code-file script.js`
Execute JS from stdin	`echo 'vigolium.utils.md5("test")' \| vigolium js`
View/modify configuration	`vigolium config ls` / `config set <key> <value>`
View scanning strategies	`vigolium strategy`
Manage scope rules	`vigolium scope view`
Link source code repository	`vigolium source add --hostname <host> --path ./src`
Clone and scan with source code	`vigolium scan -t <url> --source-url https://github.com/org/repo`
Manage projects	`vigolium project create <name>` / `project list` / `project use <name>`
List cloud-storage objects for current project	`vigolium storage ls` (add `--prefix ugc/` or `--tree` )
Upload a file to project storage	`vigolium storage upload ./report.pdf --key reports/q4.pdf`
Download an object	`vigolium storage download ugc/foo.tar.gz -o foo.tar.gz`
Download a scan's result bundle	`vigolium storage results <scan-uuid>`
Generate a presigned GET/PUT URL	`vigolium storage presign --key ugc/foo.tar.gz --method GET --expiry 1h`
Delete cloud-storage objects	`vigolium storage rm ugc/foo.tar.gz` (add `-F` to skip confirm)
List agent sessions	`vigolium agent session` or `vigolium agent session <uuid>`
Seed database with sample data	`vigolium db seed`
Import findings from file	`vigolium finding load -i findings.jsonl`
Import audit output folder or JSONL export	`vigolium import <path>`
View runtime logs for a scan/agent session	`vigolium log <uuid>` (add `-f` to follow, `--tail N` )
List all native + agentic sessions with log status	`vigolium log ls`
Initialize `~/.vigolium/` with defaults	`vigolium init` (add `--force` to regenerate)
Wipe `~/.vigolium/` and reinitialize	`vigolium config clean`
Validate extension files	`vigolium ext lint --ext custom-check.js`
Evaluate JS inline	`vigolium ext eval 'vigolium.log.info("hello")'`
Manage auth (lint, list, load, totp)	`vigolium auth lint` / `auth list` / `auth load` / `auth totp`
Run health check on installation	`vigolium doctor`

使用以下内容快速找到合适的命令：

我需要...	使用命令
扫描一个或多个目标URL	`vigolium scan -t <url>`
使用自定义方法/头信息扫描单个URL	`vigolium scan-url <url> --method POST --body '...'`
扫描文件/标准输入中的原始HTTP请求	`vigolium scan-request -i request.txt`
仅运行一个扫描阶段	`vigolium run <phase>` 或 `scan --only <phase>`
针对目标运行自定义JS扩展	`vigolium run extension -t <url> --ext custom-check.js`
导入OpenAPI/Swagger规范并扫描	`vigolium scan -I openapi -i spec.yaml -t <base-url>`
导入Burp/HAR/cURL流量	`vigolium scan -I burp -i export.xml`
按标签过滤模块	`vigolium scan -t <url> --module-tag spring --module-tag injection`
将流量导入数据库但不扫描	`vigolium ingest -t <url> -I openapi -i spec.yaml`
启动API服务器	`vigolium server`
启动服务器并自动扫描新流量	`vigolium server -t <url> -S`
对源代码运行AI代码审查	`vigolium agent query --prompt-template security-code-review --source ./src`
使用内联提示运行AI Agent	`vigolium agent query 'review this code for vulnerabilities'`
自主AI驱动扫描	`vigolium agent autopilot -t <url>`
使用自然语言提示的Autopilot	`vigolium agent autopilot "scan VAmPI at ~/src/VAmPI on localhost:3005"`
使用强度预设的Autopilot	`vigolium agent autopilot -t <url> --intensity deep`
扫描PR差异的Autopilot	`vigolium agent autopilot -t <url> --source ./src --diff main...feature-branch`
全范围AI驱动扫描（发现→规划→扫描→分类）	`vigolium agent swarm -t <url> --discover`
针对特定端点的深度定向漏洞扫描	`vigolium agent swarm -t <url>`
使用自然语言提示的Swarm	`vigolium agent swarm "scan source at ~/src/app on localhost:3005"`
使用curl命令输入的Swarm	`vigolium agent swarm --input "curl -X POST <url> -d '...'"`
结合源代码的Swarm（路由发现+SAST+代码审计）	`vigolium agent swarm -t <url> --source ./src`
使用强度预设的Swarm	`vigolium agent swarm -t <url> --intensity quick`
结合后台vigolium-audit的Swarm	`vigolium agent swarm -t <url> --source ./src --audit lite`
使用自定义指令的Swarm	`vigolium agent swarm -t <url> --instruction "Focus on GraphQL"`
仅源代码分析（不扫描）	`vigolium agent swarm -t <url> --source ./src --source-analysis-only`
前台vigolium-audit（lite/balanced/deep模式）	`vigolium agent audit --driver=audit --mode deep --source .`
审计远程仓库	`vigolium agent audit --driver=audit --mode lite --source https://github.com/org/repo`
确认现有发现的PoC	`vigolium agent audit --driver=audit --mode confirm --source ./audit-tree`
交互式手动驱动审计	`vigolium agent audit -i --source ./src`
前台piolium（Pi原生）审计	`vigolium agent audit --driver=piolium --mode balanced --source .`
Piolium逐文件全面漏洞排查	`vigolium agent audit --driver=piolium --mode longshot --source ./src --plm-longshot-langs python,go`
使用自定义Pi提供商/模型的Piolium	`vigolium agent audit --driver=piolium --pi-provider vertex-anthropic --pi-model claude-opus-4-6 --source .`
运行vigolium-audit，仅当无claude/codex CLI时回退到piolium	`vigolium agent audit --source .`
无条件连续运行vigolium-audit + piolium	`vigolium agent audit --driver=both --source .`
在统一审计下仅运行一个驱动	`vigolium agent audit --driver=audit --source .`
从gs://归档文件审计	`vigolium agent audit --source gs://my-project/snapshots/app.tar.gz`
交互式olium TUI	`vigolium olium` （别名 `vigolium ol` ）
单次olium提示输出到标准输出	`vigolium olium -p "explain this codebase"`
通过anthropic-vertex使用Olium（Vertex上的Claude）	`vigolium olium --provider anthropic-vertex --gcp-project my-gcp --gcp-location us-east5 --model claude-opus-4-6`
通过google-vertex使用Olium（原生Gemini）	`vigolium olium --provider google-vertex --model gemini-3.1-pro`
浏览存储的HTTP流量	`vigolium traffic` 或 `vigolium traffic <search>`
浏览发现的漏洞	`vigolium finding` 或 `vigolium db ls --table findings`
重放带变异的请求并对比基线（外部Agent确认步骤）	`vigolium replay --record-uuid <uuid> -m 'name=id,payload=1 OR 1=1'`
重放发现漏洞的HTTP证据并携带载荷	`vigolium replay --finding-id 42 -m 'name=q,payload=<svg/onload=alert(1)>'`
重放任意curl/原始/Burp/base64/URL输入	`vigolium replay -i "curl -X POST <url> -d '...'"`
在重放之间持久化Cookie（多步骤认证）	`vigolium replay --session-id login --record-uuid <uuid>`
按模块类型或来源过滤发现结果	`vigolium finding --module-type active --finding-source audit`
查看数据库统计信息	`vigolium db stats`
将结果导出为JSONL/HTML	`vigolium export --format jsonl -o results.jsonl`
清理数据库记录	`vigolium db clean --host <hostname>`
列出可用的扫描器模块	`vigolium module ls` 或 `vigolium scan -M`
启用/禁用特定模块	`vigolium module enable xss` / `module disable sqli`
管理JavaScript扩展	`vigolium ext ls` / `ext docs` / `ext preset`
使用vigolium API执行任意JS代码	`vigolium js --code 'vigolium.http.get("https://example.com")'`
从文件执行JS代码	`vigolium js --code-file script.js`
从标准输入执行JS代码	`echo 'vigolium.utils.md5("test")' \| vigolium js`
查看/修改配置	`vigolium config ls` / `config set <key> <value>`
查看扫描策略	`vigolium strategy`
管理范围规则	`vigolium scope view`
关联源代码仓库	`vigolium source add --hostname <host> --path ./src`
克隆并结合源代码扫描	`vigolium scan -t <url> --source-url https://github.com/org/repo`
管理项目	`vigolium project create <name>` / `project list` / `project use <name>`
列出当前项目的云存储对象	`vigolium storage ls` （添加 `--prefix ugc/` 或 `--tree` ）
上传文件到项目存储	`vigolium storage upload ./report.pdf --key reports/q4.pdf`
下载对象	`vigolium storage download ugc/foo.tar.gz -o foo.tar.gz`
下载扫描结果包	`vigolium storage results <scan-uuid>`
生成预签名GET/PUT URL	`vigolium storage presign --key ugc/foo.tar.gz --method GET --expiry 1h`
删除云存储对象	`vigolium storage rm ugc/foo.tar.gz` （添加 `-F` 跳过确认）
列出Agent会话	`vigolium agent session` 或 `vigolium agent session <uuid>`
向数据库填充示例数据	`vigolium db seed`
从文件导入发现结果	`vigolium finding load -i findings.jsonl`
导入审计输出文件夹或JSONL导出文件	`vigolium import <path>`
查看扫描/Agent会话的运行时日志	`vigolium log <uuid>` （添加 `-f` 实时跟踪， `--tail N` 查看最后N行）
列出所有原生+Agent会话及日志状态	`vigolium log ls`
使用默认值初始化 `~/.vigolium/`	`vigolium init` （添加 `--force` 重新生成）
清空 `~/.vigolium/` 并重新初始化	`vigolium config clean`
验证扩展文件	`vigolium ext lint --ext custom-check.js`
内联执行JS代码	`vigolium ext eval 'vigolium.log.info("hello")'`
管理认证（lint、list、load、totp）	`vigolium auth lint` / `auth list` / `auth load` / `auth totp`
运行安装健康检查	`vigolium doctor`

Reference Guide

参考指南

Load detailed reference based on what you need:

Topic	Reference	Load When
Scanning commands	`references/scanning-commands.md`	scan, scan-url, scan-request, run flags and options
Server & ingestion	`references/server-and-ingestion.md`	server, ingest, traffic command flags
Agent commands	`references/agent-commands.md`	agent, agent query, agent autopilot, agent swarm, agent olium, agent audit, agent session — flags, intensities, providers, templates
Session / auth config	`references/session-auth-config.md`	--auth-file/--auth flags, YAML format, extract rules, authenticated scanning setup
Data & management	`references/data-and-management.md`	db, module, extensions, js, config, scope, source, strategy, export, project, storage
Complete flag index	`references/flags-reference.md`	Looking up any specific flag by name
Writing extensions	`references/writing-extensions.md`	Creating custom JS scanner modules, extension API

根据需求加载详细参考文档：

主题	参考文档	加载场景
扫描命令	`references/scanning-commands.md`	scan、scan-url、scan-request、run命令的标志和选项
服务器与采集	`references/server-and-ingestion.md`	server、ingest、traffic命令的标志
Agent命令	`references/agent-commands.md`	agent、agent query、agent autopilot、agent swarm、agent olium、agent audit、agent session的标志、强度、提供商、模板
会话/认证配置	`references/session-auth-config.md`	--auth-file/--auth标志、YAML格式、提取规则、认证扫描设置
数据与管理	`references/data-and-management.md`	db、module、extensions、js、config、scope、source、strategy、export、project、storage命令
完整标志索引	`references/flags-reference.md`	按名称查找特定标志
编写扩展	`references/writing-extensions.md`	创建自定义JS扫描器模块、扩展API

Scanning Strategies

扫描策略

Strategies control which phases run during a scan. Use

--strategy <name>

Strategy	ExtHarvest	Discovery	Spidering	KnownIssueScan	Audit	Source-Aware
lite	no	no	no	no	yes	no
balanced	no	yes	yes	yes	yes	no
deep	yes	yes	yes	yes	yes	no
whitebox	no	yes	no	yes	yes	yes

Default strategy is set in config:
```
scanning_strategy.default_strategy
```
Balanced is the default when
```
--strategy
```
is not specified
View all strategies:
```
vigolium strategy ls
```
Whitebox requires
```
--source <path>
```
or
```
--source-url <git-url>
```
to link application source code

策略控制扫描期间运行的阶段。使用

--strategy <name>

指定：

策略	ExtHarvest	Discovery	Spidering	KnownIssueScan	Audit	Source-Aware
lite	否	否	否	否	是	否
balanced	否	是	是	是	是	否
deep	是	是	是	是	是	否
whitebox	否	是	否	是	是	是

默认策略在配置中设置：
```
scanning_strategy.default_strategy
```
未指定
```
--strategy
```
时，默认使用balanced策略
查看所有策略：
```
vigolium strategy ls
```
Whitebox策略需要
```
--source <path>
```
或
```
--source-url <git-url>
```
关联应用源代码

Scan Phases

扫描阶段

Vigolium runs up to 8 phases. Use

--only <phase>

to isolate one, or

--skip <phase>

to skip phases.

Phase	Aliases	Description
`ingestion`	—	Parse and store input (URLs, specs, files) into the database
`discovery`	`deparos` , `discover`	Adaptive content discovery (directories, files, hidden endpoints)
`external-harvest`	—	Aggregate URLs from Wayback Machine, Common Crawl, AlienVault OTX
`spidering`	`spitolas`	Headless browser crawling for JS-driven routes and dynamic content
`known-issue-scan`	—	Security posture assessment via Nuclei templates + Kingfisher secrets
`sast`	—	Static analysis on linked source code (requires `--source` )
`audit`	`dynamic-assessment`	Core vulnerability scanning with active and passive modules
`extension`	`ext`	Run only JavaScript extension modules (enables extensions, skips built-in modules)

```
--only
```
and
```
--skip
```
are mutually exclusive

Phase aliases work with both flags:

--only deparos

equals

--only discovery

--only ext

equals

--only extension

Run a single phase directly:
```
vigolium run discover -t <url>
```

Vigolium最多运行8个阶段。使用

--only <phase>

仅运行单个阶段，或

--skip <phase>

跳过指定阶段。

阶段	别名	描述
`ingestion`	—	解析输入（URL、规范、文件）并存储到数据库
`discovery`	`deparos` , `discover`	自适应内容发现（目录、文件、隐藏端点）
`external-harvest`	—	从Wayback Machine、Common Crawl、AlienVault OTX聚合URL
`spidering`	`spitolas`	无头浏览器爬取JS驱动的路由和动态内容
`known-issue-scan`	—	通过Nuclei模板+Kingfisher密钥进行安全态势评估
`sast`	—	对关联的源代码进行静态分析（需要 `--source` ）
`audit`	`dynamic-assessment`	使用主动和被动模块进行核心漏洞扫描
`extension`	`ext`	仅运行JavaScript扩展模块（启用扩展，跳过内置模块）

```
--only
```
和
```
--skip
```
互斥
阶段别名可用于两个标志：
```
--only deparos
```
等价于
```
--only discovery
```
，
```
--only ext
```
等价于
```
--only extension
```
直接运行单个阶段：
```
vigolium run discover -t <url>
```

Input Formats

输入格式

Use

-I <format>

to specify the input type. Auto-detection works for OpenAPI specs.

Format	Flag	Example
URLs (default)	`-I urls`	`-t https://example.com` or `-T targets.txt`
OpenAPI 3.x	`-I openapi`	`-I openapi -i spec.yaml -t https://api.example.com`
Swagger 2.0	`-I swagger`	`-I swagger -i swagger.json`
Burp XML	`-I burp`	`-I burp -i burp-export.xml`
cURL commands	`-I curl`	`-I curl -i requests.txt`
Nuclei templates	`-I nuclei`	`-I nuclei -i templates/`
HAR archive	`-I har`	`-I har -i traffic.har`
Postman collection	`-I postman`	`-I postman -i collection.json`
stdin	—	`cat urls.txt \| vigolium scan -i -`

OpenAPI flags:

--spec-url

(use spec servers),

--spec-header

(auth headers),

--spec-var

(parameter values),

--spec-default

(fallback value).

使用

-I <format>

指定输入类型。OpenAPI规范支持自动检测。

格式	标志	示例
URLs（默认）	`-I urls`	`-t https://example.com` 或 `-T targets.txt`
OpenAPI 3.x	`-I openapi`	`-I openapi -i spec.yaml -t https://api.example.com`
Swagger 2.0	`-I swagger`	`-I swagger -i swagger.json`
Burp XML	`-I burp`	`-I burp -i burp-export.xml`
cURL命令	`-I curl`	`-I curl -i requests.txt`
Nuclei模板	`-I nuclei`	`-I nuclei -i templates/`
HAR归档	`-I har`	`-I har -i traffic.har`
Postman集合	`-I postman`	`-I postman -i collection.json`
标准输入	—	`cat urls.txt \| vigolium scan -i -`

OpenAPI标志：

--spec-url

（使用规范中的服务器）、

--spec-header

（认证头）、

--spec-var

（参数值）、

--spec-default

（回退值）。

Output and Results

输出与结果

Format	Flag	Notes
Console (default)	`--format console`	Human-readable tables to stderr
JSONL	`--format jsonl` or `-j`	Machine-readable, one JSON object per line
HTML report	`--format html -o report.html`	Interactive ag-grid report, requires `-o`

Multiple formats can be combined:

--format jsonl,html -o report.html

Export from database:

vigolium export --format jsonl -o full-export.jsonl

Export specific data:
```
vigolium export --only findings,http
```

Export HTML report:

vigolium export --format html -o report.html

DB export with filters:

vigolium db export -f csv -o records.csv --host example.com

格式	标志	说明
控制台（默认）	`--format console`	人类可读的表格输出到标准错误
JSONL	`--format jsonl` 或 `-j`	机器可读，每行一个JSON对象
HTML报告	`--format html -o report.html`	交互式ag-grid报告，需要 `-o`

可组合多种格式：

--format jsonl,html -o report.html

从数据库导出：

vigolium export --format jsonl -o full-export.jsonl

导出特定数据：
```
vigolium export --only findings,http
```

导出HTML报告：

vigolium export --format html -o report.html

带过滤器的数据库导出：

vigolium db export -f csv -o records.csv --host example.com

Workflow Recipes

工作流示例

1. Quick Single-URL Scan

1. 快速单URL扫描

bash

vigolium scan -t https://example.com

bash

vigolium scan -t https://example.com

2. Full Pipeline Scan (Discovery + Spidering + KnownIssueScan + Audit)

2. 完整流水线扫描（发现→爬取→已知问题扫描→审计）

bash

vigolium scan -t https://example.com --strategy deep

bash

vigolium scan -t https://example.com --strategy deep

3. OpenAPI Spec Scan

3. OpenAPI规范扫描

bash

undefined

bash

undefined

With explicit base URL

指定基础URL

vigolium scan -I openapi -i api-spec.yaml -t https://api.example.com

Using servers from spec

使用规范中的服务器

vigolium scan -I openapi -i api-spec.yaml --spec-url

With auth header

带认证头

vigolium scan -I openapi -i spec.yaml -t https://api.example.com
--spec-header "Authorization: Bearer <token>"

undefined

vigolium scan -I openapi -i spec.yaml -t https://api.example.com
--spec-header "Authorization: Bearer <token>"

undefined

4. Burp/HAR Import and Scan

4. Burp/HAR导入并扫描

bash

vigolium scan -I burp -i burp-export.xml -t https://example.com
vigolium scan -I har -i traffic.har

bash

vigolium scan -I burp -i burp-export.xml -t https://example.com
vigolium scan -I har -i traffic.har

5. Raw HTTP Request Scan

5. 原始HTTP请求扫描

bash

undefined

bash

undefined

From file

从文件读取

vigolium scan-request -i raw-request.txt

From stdin

从标准输入读取

echo -e "GET /api/users HTTP/1.1\r\nHost: example.com\r\n" | vigolium scan-request

With custom method and body

带自定义方法和请求体

vigolium scan-url https://api.example.com/login
--method POST --body '{"user":"admin","pass":"test"}'
-H "Content-Type: application/json"

undefined

vigolium scan-url https://api.example.com/login
--method POST --body '{"user":"admin","pass":"test"}'
-H "Content-Type: application/json"

undefined

6. Extensions-Only Phase

6. 仅扩展阶段

bash

undefined

bash

undefined

Run only JS extension modules against DB records

仅针对数据库记录运行JS扩展模块

vigolium scan -t https://example.com --only extension

With a specific extension script

使用特定扩展脚本

vigolium scan -t https://example.com --only ext --ext ./my-scanner.js

With a custom extensions directory

使用自定义扩展目录

vigolium scan -t https://example.com --only ext --ext-dir ./extensions/

Run via the run command (recommended for single extensions)

通过run命令运行（推荐用于单个扩展）

vigolium run extension -t https://example.com --ext ./custom-check.js

Run via the run command alias

通过run命令别名运行

vigolium run ext -t https://example.com --ext ./custom-check.js

undefined

vigolium run ext -t https://example.com --ext ./custom-check.js

undefined

7. Discovery-Only Phase

7. 仅发现阶段

bash

vigolium run discover -t https://example.com

bash

vigolium run discover -t https://example.com

or

或

vigolium scan -t https://example.com --only discovery

undefined

vigolium scan -t https://example.com --only discovery

undefined

8. Targeted Modules

8. 定向模块扫描

bash

undefined

bash

undefined

Run only specific modules by ID

仅运行特定ID的模块

vigolium scan -t https://example.com -m xss-reflected,sqli-error

Filter modules by tag (OR condition — matches any tag)

按标签过滤模块（OR逻辑——匹配任意标签）

vigolium scan -t https://example.com --module-tag spring --module-tag injection

Combine -m and --module-tag (union of both)

结合-m和--module-tag（两者的并集）

vigolium scan -t https://example.com -m sqli-error --module-tag xss

List available modules first

先列出可用模块

vigolium module ls vigolium module ls xss # filter by keyword

undefined

vigolium module ls vigolium module ls xss # 按关键词过滤

undefined

9. Server Mode

9. 服务器模式

bash

undefined

bash

undefined

Basic server

基础服务器

vigolium server

Custom host/port with no auth

自定义主机/端口，禁用认证

vigolium server --host 0.0.0.0 --service-port 8443 -A

With transparent proxy for recording traffic

带透明代理用于记录流量

vigolium server --ingest-proxy-port 8080

undefined

vigolium server --ingest-proxy-port 8080

undefined

10. Scan-on-Receive (Ingest + Auto-Scan)

10. 接收即扫描（采集+自动扫描）

bash

undefined

bash

undefined

Server mode: auto-scan every ingested request

服务器模式：自动扫描每个采集到的请求

vigolium server -t https://example.com --scan-on-receive

Local ingest + scan

本地采集+扫描

vigolium ingest -t https://example.com -I openapi -i spec.yaml -S

undefined

vigolium ingest -t https://example.com -I openapi -i spec.yaml -S

undefined

11. AI Agent Code Review (agent query)

11. AI Agent代码审查（agent query）

bash

undefined

bash

undefined

Security code review (SDK protocol by default — full tool access)

安全代码审查（默认SDK协议——完整工具访问权限）

vigolium agent query --prompt-template security-code-review --source ./src

Endpoint discovery from source

从源代码发现端点

vigolium agent query --prompt-template endpoint-discovery --source ./src

List available templates / backends (parent command helpers)

列出可用模板/后端（父命令辅助功能）

vigolium agent --list-templates vigolium agent --list-agents

Custom prompt with inline text

带内联文本的自定义提示

vigolium agent query 'review this code for vulnerabilities'

Pipe a prompt from stdin

从标准输入管道传递提示

echo "check for SSRF in the URL-fetching handler" | vigolium agent query --stdin

Custom prompt file with a specific backend

带特定后端的自定义提示文件

vigolium agent query --agent claude --prompt-file custom-prompt.md

With custom instruction appended to the rendered template

在渲染模板后附加自定义指令

vigolium agent query --prompt-template security-code-review --source ./src
--instruction "Focus on authentication and session management"

Dry-run to preview the rendered prompt

预演渲染后的提示（不执行）

vigolium agent query --prompt-template security-code-review --source ./src --dry-run

Save output to a file

将输出保存到文件

vigolium agent query --prompt-template security-code-review --source ./src
--output review-results.json

undefined

vigolium agent query --prompt-template security-code-review --source ./src
--output review-results.json

undefined

12. AI Agent Autopilot (Autonomous Scanning)

12. AI Agent Autopilot（自主扫描）

Autopilot runs a single autonomous operator session that drives the vigolium CLI (Read/Grep/Glob/Bash/Edit/Write tools via the in-process olium engine). When

--source

is set, an audit harness runs first and the prepared whitebox context is fed to the operator.

Audit-harness auto-pick: when neither

--audit

nor

--piolium

is set, autopilot picks piolium if

pi

+ the piolium extension are installed, otherwise falls back to the embedded vigolium-audit at its lite default. Pass

--piolium <mode>

to force piolium (auto-disables vigolium-audit for the run); pass

--audit <mode>

to force vigolium-audit; pass

--audit=off

to disable both.

Intensity presets (

--intensity

) bundle the operator command budget, audit mode, browser, and pre-scan strategy into a single flag. Explicit flags always override. The

Command Budget

is internal — there is no

--max-commands

flag.

Preset	Command Budget	Timeout	Audit Mode	Browser
`quick`	150	1h	`lite`	on
`balanced` (default)	500	6h	`balanced`	on
`deep`	1500	12h	`deep`	on

bash

undefined

Autopilot运行单个自主操作员会话，控制Vigolium CLI（通过进程内olium引擎使用Read/Grep/Glob/Bash/Edit/Write工具）。设置

--source

时，会先运行审计工具，并将准备好的白盒上下文传递给操作员。

审计工具自动选择：当未设置

--audit

或

--piolium

时，如果安装了

pi

+piolium扩展，Autopilot会选择piolium，否则回退到嵌入式vigolium-audit的lite默认模式。传递

--piolium <mode>

强制使用piolium（自动禁用本次运行的vigolium-audit）；传递

--audit <mode>

强制使用vigolium-audit；传递

--audit=off

禁用两者。

强度预设（

--intensity

）将操作员命令预算、审计模式、浏览器和预扫描策略打包为单个标志。显式标志始终覆盖预设。

Command Budget

为内部参数——没有

--max-commands

标志。

预设	命令预算	超时	审计模式	浏览器
`quick`	150	1h	`lite`	开启
`balanced` （默认）	500	6h	`balanced`	开启
`deep`	1500	12h	`deep`	开启

bash

undefined

Basic autonomous scan (balanced by default)

基础自主扫描（默认balanced）

vigolium agent autopilot -t https://example.com

Natural-language prompt — target, source, focus are auto-extracted

自然语言提示——自动提取目标、源代码、关注点

vigolium agent autopilot "scan VAmPI source at ~/src/VAmPI on localhost:3005" vigolium agent autopilot "test auth bypass on https://app.example.com"

With source code context (triggers the audit harness automatically)

带源代码上下文（自动触发审计工具）

vigolium agent autopilot -t https://example.com --source ./src

Specific files + custom instruction

指定文件+自定义指令

vigolium agent autopilot -t https://example.com --source ./src
--files "routes/api.js,controllers/auth.js"
--instruction "Focus on the new payment endpoint"

Intensity presets

强度预设

vigolium agent autopilot -t https://example.com --source ./src --intensity quick # CI/PR vigolium agent autopilot -t https://example.com --intensity deep # full pentest

vigolium agent autopilot -t https://example.com --source ./src --intensity quick # CI/PR场景 vigolium agent autopilot -t https://example.com --intensity deep # 完整渗透测试

Override a specific setting within a preset

覆盖预设中的特定设置

vigolium agent autopilot -t https://example.com --intensity deep --max-duration 4h

Scan only a PR diff or recent commits

仅扫描PR差异或最近提交

vigolium agent autopilot -t https://example.com --source ./src --diff main...feature-branch vigolium agent autopilot -t https://example.com --source ./src --last-commits 3

Cap the wall-clock budget (explicit override)

设置最长运行时间（显式覆盖）

vigolium agent autopilot -t https://example.com --max-duration 15m

Pipe a curl command (target auto-derived)

管道传递curl命令（自动推导目标）

echo "curl -X POST https://example.com/api/login -d '{"user":"admin"}'" | vigolium agent autopilot

Browser-based auth preflight

基于浏览器的认证预检查

vigolium agent autopilot -t https://example.com --browser --credentials "admin/admin123" vigolium agent autopilot -t https://example.com --browser --auth-required
--browser-start-url https://example.com/login

Disable the audit harness when source is provided

当提供源代码时禁用审计工具

vigolium agent autopilot -t https://example.com --source ./src --audit=off

Choose a specific vigolium-audit mode

指定特定的vigolium-audit模式

vigolium agent autopilot -t https://example.com --source ./src --audit deep

Force piolium as the audit harness (auto-disables vigolium-audit for this run)

强制使用piolium作为审计工具（自动禁用本次运行的vigolium-audit）

vigolium agent autopilot -t https://example.com --source ./src --piolium balanced

Run an AI triage pass over findings after the scan

扫描后对发现结果运行AI分类

vigolium agent autopilot -t https://example.com --triage

Skip the prompt-safety classifier on the natural-language prompt (only when refusing a known-good prompt)

跳过自然语言提示的安全分类器（仅在已知合法提示被拒绝时使用）

vigolium agent autopilot "scan this internal app at https://app.test" --disable-guardrail

Upload results to cloud storage after completion

完成后将结果上传到云存储

vigolium agent autopilot -t https://example.com --source ./src --upload-results

Preview rendered system prompt without launching the agent

预览渲染后的系统提示（不启动Agent）

vigolium agent autopilot -t https://example.com --dry-run

Override the olium provider for a single run

覆盖单次运行的olium提供商

vigolium agent autopilot -t https://example.com --provider anthropic-api-key

Drive autopilot through anthropic-vertex (Claude on Vertex; requires a claude-* model)

通过anthropic-vertex驱动Autopilot（Vertex上的Claude；需要claude-*模型）

vigolium agent autopilot -t https://example.com
--provider anthropic-vertex --gcp-project my-gcp --gcp-location us-east5 --model claude-opus-4-6

undefined

vigolium agent autopilot -t https://example.com
--provider anthropic-vertex --gcp-project my-gcp --gcp-location us-east5 --model claude-opus-4-6

undefined

13. AI Agent Swarm (Targeted or Full-Scope)

13. AI Agent Swarm（定向或全范围）

Swarm orchestrates: normalize → source analysis (AI,

--source

) → code audit (AI) → SAST (native) → SAST review (AI) → discover (native,

--discover

) → plan (AI) → extension (Go) → native scan → triage (AI,

--triage

) → rescan (loop).

Intensity presets (

--intensity

) bundle multiple defaults — explicit flags always override. The preset applies even without

--intensity

(

balanced

is the implicit default). Code Audit only takes effect with

--source

; Auth only with the browser enabled.

Preset	Discover	Triage	Code Audit	Browser	Auth	Swarm Duration	Max Iterations
`quick`	on	off	off	on	off	2h	1
`balanced` (default)	on	on	on	on	off	12h	3
`deep`	on	on	on	on	on	24h	5

bash

undefined

Swarm编排流程：标准化→源代码分析（AI，

--source

）→代码审计（AI）→SAST（原生）→SAST审查（AI）→发现（原生，

--discover

）→规划（AI）→扩展（Go）→原生扫描→分类（AI，

--triage

）→重新扫描（循环）。

强度预设（

--intensity

）打包多个默认设置——显式标志始终覆盖预设。即使未指定

--intensity

，预设也会生效（默认

balanced

）。代码审计仅在设置

--source

时生效；认证仅在启用浏览器时生效。

预设	发现	分类	代码审计	浏览器	认证	Swarm时长	最大迭代次数
`quick`	开启	关闭	关闭	开启	关闭	2h	1
`balanced` （默认）	开启	开启	开启	开启	关闭	12h	3
`deep`	开启	开启	开启	开启	开启	24h	5

bash

undefined

Target a URL for deep analysis

针对URL进行深度分析

vigolium agent swarm -t https://example.com/api/users

Natural-language prompt — target, source, focus auto-extracted

自然语言提示——自动提取目标、源代码、关注点

vigolium agent swarm "scan source at ~/src/app on localhost:3005" vigolium agent swarm "scan all source code from ~/src/crAPI, ~/src/DVWA"

Full-scope scan with discovery

带发现功能的全范围扫描

vigolium agent swarm -t https://example.com --discover

Analyze a curl command

分析curl命令

vigolium agent swarm --input "curl -X POST https://example.com/api/login -d '{"user":"admin"}'"

Pipe raw HTTP request from stdin (auto-detected)

从标准输入管道传递原始HTTP请求（自动检测）

echo -e "POST /api/search HTTP/1.1\r\nHost: example.com\r\n\r\nq=test" | vigolium agent swarm

Scan a record from the database

扫描数据库中的记录

vigolium agent swarm --record-uuid 550e8400-e29b-41d4-a716-446655440000

Focus on a specific vulnerability type

聚焦特定漏洞类型

vigolium agent swarm -t https://example.com/api/users --vuln-type sqli

Source-aware swarm (route extraction + code audit + SAST + scanning)

源代码感知的Swarm（路由提取+代码审计+SAST+扫描）

vigolium agent swarm -t http://localhost:3000 --source ./src

Full-scope source-aware scan

全范围源代码感知扫描

vigolium agent swarm -t http://localhost:3000 --source ~/projects/express-app --discover

Source-aware with specific files

带指定文件的源代码感知扫描

vigolium agent swarm -t http://localhost:8080 --source ./backend
--files src/routes/api.js,src/models/user.js

Source analysis only (extract routes, no scan)

仅源代码分析（提取路由，不扫描）

vigolium agent swarm -t http://localhost:3000 --source ./src --source-analysis-only

Intensity presets

强度预设

vigolium agent swarm -t https://example.com/api/users?id=1 --intensity quick vigolium agent swarm -t https://example.com --source ./src --intensity deep

Override a specific setting within a preset

覆盖预设中的特定设置

vigolium agent swarm -t https://example.com --intensity deep --triage=false

Run a background vigolium-audit in parallel (requires --source). Bare --audit = lite.

并行运行后台vigolium-audit（需要--source）。仅--audit等价于lite模式。

vigolium agent swarm -t http://localhost:3000 --source ./src --audit vigolium agent swarm -t http://localhost:3000 --source ./src --audit deep

Or run piolium as the background audit harness (Pi runtime; requires --source)

或使用piolium作为后台审计工具（Pi运行时；需要--source）

vigolium agent swarm -t http://localhost:3000 --source ./src --piolium balanced

Pull HTTP records from the active project as input

从活动项目中拉取HTTP记录作为输入

vigolium agent swarm --all-records vigolium agent swarm --records-from "host=example.com,status=200,method=GET,path=/api,since=2026-04-01" vigolium agent swarm --record-uuid 550e8400-...,7c9b1a2d-... # repeatable / comma-separated

Force the extension agent to run even when the planner picks built-in modules

即使规划器选择内置模块，也强制运行扩展Agent

vigolium agent swarm -t https://example.com/api --with-extensions

Tune master-agent batching and probing

调整主Agent的批处理和探测设置

vigolium agent swarm --all-records --master-batch-size 10 --batch-concurrency 4
--probe-concurrency 20 --probe-timeout 15s --max-plan-records 25

Scan only changed code

仅扫描变更代码

vigolium agent swarm -t https://example.com --source ./src --diff main...feature-branch vigolium agent swarm -t https://example.com --source ./src --last-commits 3

Skip SAST tools during source analysis

源代码分析期间跳过SAST工具

vigolium agent swarm -t http://localhost:3000 --source ./src --skip-sast

Disable code audit (still runs source analysis + SAST)

禁用代码审计（仍运行源代码分析+SAST）

vigolium agent swarm -t http://localhost:3000 --source ./src --code-audit=false

Enable triage and rescan loop

启用分类和重新扫描循环

vigolium agent swarm -t https://example.com/api/users --triage --max-iterations 5

Browser automation + auth capture

浏览器自动化+认证捕获

vigolium agent swarm -t https://example.com --browser --browser-auth
--credentials "username=admin,password=secret"

Upload results to cloud storage

将结果上传到云存储

vigolium agent swarm -t https://example.com --source ./src --upload-results

Custom instructions to guide the agent

自定义指令引导Agent

vigolium agent swarm -t https://example.com/api/users --instruction "Focus on GraphQL parsing"

Instructions from a file

从文件读取指令

vigolium agent swarm -t https://example.com/api/users --instruction-file hints.txt

Resume from a specific phase

从特定阶段恢复

vigolium agent swarm -t https://example.com --start-from plan

Specify modules explicitly

显式指定模块

vigolium agent swarm -t https://example.com/api/search -m xss-reflected,xss-stored

Control scanning phases

控制扫描阶段

vigolium agent swarm -t https://example.com --only dynamic-assessment vigolium agent swarm -t https://example.com --skip discovery,spidering

Custom overall duration

自定义总时长

vigolium agent swarm -t https://example.com --max-duration 24h

Preview master agent prompt (no execution)

预览主Agent提示（不执行）

vigolium agent swarm -t https://example.com/api/users --dry-run

Show rendered prompts during execution

执行期间显示渲染后的提示

vigolium agent swarm -t https://example.com/api/users --show-prompt

undefined

vigolium agent swarm -t https://example.com/api/users --show-prompt

undefined

13b. AI Agent Audit — vigolium-audit harness (Foreground Whitebox Audit)

13b. AI Agent Audit — vigolium-audit工具（前台白盒审计）

The former

agent archon

command is gone. Drive the embedded vigolium-audit harness directly with

vigolium agent audit --driver=audit

(

--driver=audit

pins the single harness; the dispatcher in §13d covers

auto

both

bash

undefined

原

agent archon

命令已移除。使用

vigolium agent audit --driver=audit

直接控制嵌入式vigolium-audit工具（

--driver=audit

固定单个工具；§13d中的调度器支持

auto

both

）。

bash

undefined

Deep audit of a local repo

本地仓库深度审计

vigolium agent audit --driver=audit --mode deep --source .

Fast lite audit of a remote repo (clones automatically)

远程仓库快速lite审计（自动克隆）

vigolium agent audit --driver=audit --mode lite --source https://github.com/org/repo

Balanced audit

平衡模式审计

vigolium agent audit --driver=audit --mode balanced --source ~/code/myapp

Second pass on a prior audit tree (revisit with new context)

对之前的审计树进行二次检查（结合新上下文重新访问）

vigolium agent audit --driver=audit --mode revisit --source ./prior-audit-tree

PoC construction for previously confirmed findings

为已确认的发现构建PoC

vigolium agent audit --driver=audit --mode confirm --source ./audit-with-findings

Chain modes back-to-back (audit runs them natively as one row)

连续运行多个模式（审计原生支持链式运行）

vigolium agent audit --driver=audit --modes deep,refresh,confirm --source .

Read-only progress check (no agent launched)

只读进度检查（不启动Agent）

vigolium agent audit --driver=audit --mode status --source ./in-progress-audit

Pick the coding agent (claude or codex) — provider implies one, --agent overrides

选择编码Agent（claude或codex）——提供商隐含选择，--agent可覆盖

vigolium agent audit --driver=audit --agent codex --source .

Drive the audit yourself interactively, then import the on-disk results

交互式手动驱动审计，然后导入磁盘上的结果

vigolium agent audit -i --source ./src vigolium import ./src/vigolium-results --format html -o audit-report.html

List the audit mode graph (phases, time estimates) and exit

列出审计模式图（阶段、时间估算）并退出

vigolium agent audit --list-modes


Valid `--mode` values (audit leg): `lite`, `balanced`, `deep`, `revisit`, `confirm`, `merge` (shared) plus `reinvest`, `refresh`, `mock`, `diff`, `status` (audit-specific). The audit leg drives the `claude` or `codex` CLI directly (selected by `--provider`/`--agent`). `--no-preflight` and `--preflight-timeout` skip / tune the pre-launch CLI roundtrip; `--show-thinking` surfaces the agent's thinking blocks; `--keep-raw` preserves raw scanner output under `<source>/vigolium-results/`.

vigolium agent audit --list-modes


有效的`--mode`值（审计端）：`lite`, `balanced`, `deep`, `revisit`, `confirm`, `merge`（共享）以及`reinvest`, `refresh`, `mock`, `diff`, `status`（审计专用）。审计端直接控制`claude`或`codex` CLI（由`--provider`/`--agent`选择）。`--no-preflight`和`--preflight-timeout`跳过/调整启动前的CLI往返检查；`--show-thinking`显示Agent的思考过程；`--keep-raw`在`<source>/vigolium-results/`下保留原始扫描器输出。

13c. AI Agent Piolium (Pi-Native Foreground Audit)

13c. AI Agent Piolium（Pi原生前台审计）

Drives the user's installed piolium Pi extension via

pi --mode json -p /piolium-<mode>

. Requires

pi

in PATH and

piolium

registered (install via

pi install git:git@github.com:vigolium/piolium.git

). Same on-disk schema as vigolium-audit (audit-state.json + findings-draft/), tagged separately in the DB.

bash

undefined

通过

pi --mode json -p /piolium-<mode>

控制用户安装的piolium Pi扩展。需要

pi

在PATH中且已注册

piolium

（通过

pi install git:git@github.com:vigolium/piolium.git

安装）。磁盘架构与vigolium-audit相同（audit-state.json + findings-draft/），在数据库中单独标记。

bash

undefined

Balanced 9-phase audit of a local repo

本地仓库平衡模式9阶段审计

vigolium agent audit --driver=piolium --mode balanced --source .

Quick lite audit of a remote git URL (auto-clones)

远程Git URL快速lite审计（自动克隆）

vigolium agent audit --driver=piolium --mode lite --source https://github.com/org/repo

Hail-mary file-by-file vulnerability hunt over Python+Go files only

仅针对Python+Go文件的逐文件全面漏洞排查

vigolium agent audit --driver=piolium --mode longshot --source ./src
--plm-longshot-langs python,go --plm-longshot-limit 200

Use a specific Pi provider/model for this run (overrides ~/.pi defaults)

本次运行使用特定Pi提供商/模型（覆盖~/.pi默认设置）

vigolium agent audit --driver=piolium --pi-provider vertex-anthropic --pi-model claude-opus-4-6 --source .

Full clone history (commit archaeology) via intensity preset

通过强度预设扫描完整克隆历史（提交考古）

vigolium agent audit --driver=piolium --intensity deep --source https://github.com/org/repo

Cap commit-history scan to last 60 days

将提交历史扫描限制为最近60天

vigolium agent audit --driver=piolium --mode balanced --source . --plm-scan-since "60 days ago"

Resume / re-audit an existing tree (anti-anchored second pass)

恢复/重新审计现有树（防锚定二次检查）

vigolium agent audit --driver=piolium --mode revisit --source ./prior-piolium-tree

Read-only progress check on an in-progress run

只读检查正在运行的任务进度

vigolium agent audit --driver=piolium --mode status --source ./in-progress-piolium

Skip the pre-audit pi roundtrip check (auth + model availability)

跳过审计前的pi往返检查（认证+模型可用性）

vigolium agent audit --driver=piolium --mode balanced --source . --no-preflight


Valid `--mode` values: `lite`, `balanced`, `deep`, `revisit`, `confirm`, `merge`, `diff`, `longshot`, `status`, `smoke`. Intensity presets: `quick` (lite + shallow clone), `balanced` (default), `deep` (deep + full clone history). Piolium passthroughs (forwarded as `--plm-*` to piolium itself): `--plm-scan-limit`, `--plm-scan-since`, `--plm-phase-retries`, `--plm-command-retries`, `--plm-longshot-limit`, `--plm-longshot-timeout`, `--plm-longshot-langs`.

vigolium agent audit --driver=piolium --mode balanced --source . --no-preflight


有效的`--mode`值：`lite`, `balanced`, `deep`, `revisit`, `confirm`, `merge`, `diff`, `longshot`, `status`, `smoke`。强度预设：`quick`（lite+浅克隆）、`balanced`（默认）、`deep`（deep+完整克隆历史）。Piolium传递参数（以`--plm-*`转发给piolium）：`--plm-scan-limit`, `--plm-scan-since`, `--plm-phase-retries`, `--plm-command-retries`, `--plm-longshot-limit`, `--plm-longshot-timeout`, `--plm-longshot-langs`。

13d. AI Agent Audit (Unified Driver Dispatcher)

13d. AI Agent Audit（统一驱动调度器）

Drives the embedded vigolium-audit harness (driver name

audit

) and/or piolium against the same source tree under a single parent AgenticScan UUID. Default

--driver=auto

runs vigolium-audit and only falls back to piolium when the resolved claude/codex CLI is missing from PATH — a clean audit run never consults piolium, and a mid-run audit failure surfaces directly rather than silently retrying.

--driver=both

runs audit then piolium unconditionally. A project-wide post-pass findings dedup runs after the drivers finish. Per-driver child rows + session subdirs (

{session}/audit/

{session}/piolium/

) keep them separated on disk and in the DB while still scoring as one logical audit.

bash

undefined

针对同一源代码树，控制嵌入式vigolium-audit工具（驱动名称

audit

）和/或piolium，并使用单个父AgenticScan UUID。默认

--driver=auto

运行vigolium-audit，仅当PATH中缺少解析后的claude/codex CLI时才回退到piolium——正常审计运行不会调用piolium，运行中的审计失败会直接显示而非静默重试。

--driver=both

无条件先运行audit再运行piolium。驱动完成后会运行项目级的发现结果去重。每个驱动的子记录+会话子目录（

{session}/audit/

{session}/piolium/

）在磁盘和数据库中保持分离，但仍被视为一个逻辑审计。

bash

undefined

Default: run vigolium-audit, fall back to piolium only if claude/codex CLI is missing

默认：运行vigolium-audit，仅当claude/codex CLI缺失时回退到piolium

vigolium agent audit --source .

Run both drivers back-to-back, unconditionally

无条件连续运行两个驱动

vigolium agent audit --driver=both --source .

Force a single driver

强制使用单个驱动

vigolium agent audit --driver=audit --source . vigolium agent audit --driver=piolium --source ./src

Driver-specific modes are only allowed when --driver is forced to that driver

仅当--driver强制为对应驱动时，才能使用驱动特定模式

vigolium agent audit --driver=piolium --source . --mode longshot vigolium agent audit --driver=audit --source . --mode mock

Audit from a gs:// archive (downloaded + extracted once, shared by both drivers)

从gs://归档文件审计（下载+提取一次，由两个驱动共享）

vigolium agent audit --source gs://my-project/snapshots/app.tar.gz

Skip the post-pass project-wide findings dedup

跳过项目级发现结果去重

vigolium agent audit --source . --no-dedup

Pin the audit leg's agent + provider (anthropic-* → claude, openai-* → codex)

固定审计端的Agent+提供商（anthropic-→claude，openai-→codex）

vigolium agent audit --source . --provider anthropic-oauth vigolium agent audit --source . --agent codex

BYOK auth for the run (literal, $ENV_NAME, or @path)

本次运行使用自定义认证（字面量、$ENV_NAME或@路径）

vigolium agent audit --source . --oauth-token "$(cat ~/.config/claude-token)"

Override piolium's Pi defaults

覆盖piolium的Pi默认设置

vigolium agent audit --driver=piolium --source . --pi-provider google-vertex --pi-model gemini-3.1-pro

Pass piolium-only knobs through (ignored on the audit leg)

传递piolium专用参数（审计端忽略）

vigolium agent audit --driver=piolium --source . --plm-scan-since "30 days ago" --plm-longshot-langs python


Under `--driver=auto`/`both`, `--mode` is restricted to the **shared** set: `lite`, `balanced`, `deep`, `revisit`, `confirm`, `merge`. Driver-specific modes (piolium's `longshot`/`smoke`/`diff`/`status`, audit's `reinvest`/`refresh`/`mock`/`diff`/`status`) require forcing `--driver=piolium` or `--driver=audit`. `--intensity deep` resolves to the chain `deep,confirm`; `--modes a,b,c` chains modes back-to-back. Under `--driver=both`, if one driver fails the other still runs — the parent run reports per-driver status.

vigolium agent audit --driver=piolium --source . --plm-scan-since "30 days ago" --plm-longshot-langs python


在`--driver=auto`/`both`模式下，`--mode`限制为**共享**集合：`lite`, `balanced`, `deep`, `revisit`, `confirm`, `merge`。驱动特定模式（piolium的`longshot`/`smoke`/`diff`/`status`，audit的`reinvest`/`refresh`/`mock`/`diff`/`status`）需要强制设置`--driver=piolium`或`--driver=audit`。`--intensity deep`解析为链式模式`deep,confirm`；`--modes a,b,c`链式运行多个模式。在`--driver=both`模式下，即使一个驱动失败，另一个仍会运行——父运行会报告每个驱动的状态。

14. Results Inspection

14. 结果检查

bash

undefined

bash

undefined

Browse HTTP traffic

浏览HTTP流量

vigolium traffic vigolium traffic login # fuzzy search vigolium traffic --tree # hierarchical view vigolium traffic --burp # Burp-style colored output vigolium traffic --host api.example.com --method POST

vigolium traffic vigolium traffic login # 模糊搜索 vigolium traffic --tree # 层级视图 vigolium traffic --burp # Burp风格彩色输出 vigolium traffic --host api.example.com --method POST

JSONL output for agent / CI consumption (one JSON object per line)

供Agent/CI使用的JSONL输出（每行一个JSON对象）

vigolium traffic -j --host api.example.com vigolium finding -j --severity high,critical vigolium db ls -j --table findings vigolium db stats -j

Browse findings

浏览发现结果

vigolium finding vigolium finding --severity high,critical vigolium finding --module-type active vigolium finding --finding-source audit vigolium finding --burp # Burp-style format vigolium finding --id 42 # specific finding by ID vigolium finding --columns ID,SEVERITY,MODULE,MATCHED_AT,TAGS vigolium db ls --table findings --severity critical

vigolium finding vigolium finding --severity high,critical vigolium finding --module-type active vigolium finding --finding-source audit vigolium finding --burp # Burp风格格式 vigolium finding --id 42 # 通过ID查看特定发现 vigolium finding --columns ID,SEVERITY,MODULE,MATCHED_AT,TAGS vigolium db ls --table findings --severity critical

Database stats

数据库统计信息

vigolium db stats vigolium db stats --detailed # includes top hosts breakdown

vigolium db stats vigolium db stats --detailed # 包含顶级主机细分

Watch mode (auto-refresh)

监控模式（自动刷新）

vigolium traffic --watch 5s vigolium db stats --watch 10

undefined

vigolium traffic --watch 5s vigolium db stats --watch 10

undefined

14b. External-Agent Confirm Chain (Claude Code / Cursor / Pi)

14b. 外部Agent确认流程（Claude Code / Cursor / Pi）

External agents driving vigolium externally (Claude Code, Cursor, Pi, CI scripts) follow this discover → confirm → review chain:

Discover — pull what vigolium already knows in JSONL:

bash

vigolium traffic -j --host api.example.com --method POST --status 200,500
vigolium finding -j --severity high,critical --finding-source audit

Each line is one record/finding; pipe through

jq

to filter.

Confirm — mutate one request and diff the result:
bash
```
vigolium replay --record-uuid <uuid> -m 'name=id,payload=1 OR 1=1' \
                --session-id login           # persist cookies between calls
```
```
vigolium replay
```
is the CLI surface for the in-process
```
replay_request
```
tool. Accepts every input shape the agents accept —
```
--record-uuid
```
,
```
--finding-id
```
, or
```
--input
```
for curl / raw HTTP / Burp XML / base64 / URL / stdin (
```
-
```
). Output is stable JSON:
```
result.baseline
```
,
```
result.replay
```
,
```
result.diff
```
(status delta, length delta, content-hash, payload reflection, interpretation). Use
```
--pretty
```
for a human summary.

Persist auth state — multi-step flows (login → CSRF → action) need cookies between calls:

bash

vigolium replay --session-id login -i curl-login.sh         # sets cookies
vigolium replay --session-id login --record-uuid <action>   # uses cookies

Jar lives at

~/.vigolium/replay-jars/<session-id>.json

; pass

--no-cookies

to opt out.

Replay a finding's evidence — when a finding came from an imported source (audit, JSONL) with no linked record,
```
--finding-id
```
falls back to the finding's stored Request/Response bytes:
bash
```
vigolium replay --finding-id 42 -m 'name=q,payload=<svg/onload=alert(1)>'
```
Confirm against a different env —
```
--target
```
rewrites the destination while keeping the baseline request bytes intact:
bash
```
vigolium replay --record-uuid <prod-uuid> --target https://staging.example.com
```
Update the stored baseline —
```
--in-replace
```
writes the replay's response back to the source record (only when the source is a stored HTTPRecord):
bash
```
vigolium replay --record-uuid <uuid> -m '...' --in-replace
```

Routes through

HTTP_PROXY

HTTPS_PROXY

(or

--proxy

) for Burp inspection. Honors

--project-uuid

--project-name

for project scoping. Mutations support both forms:

--mutate 'name=id,payload=1 OR 1=1'

or shorthand

--mutate 'id:URL_PARAM:1 OR 1=1'

外部Agent（Claude Code、Cursor、Pi、CI脚本）驱动Vigolium时遵循以下发现→确认→审查流程：

发现 — 拉取Vigolium已有的数据，格式为JSONL：

bash

vigolium traffic -j --host api.example.com --method POST --status 200,500
vigolium finding -j --severity high,critical --finding-source audit

每行是一条记录/发现；可通过

jq

过滤。

确认 — 变异请求并对比结果：
bash
```
vigolium replay --record-uuid <uuid> -m 'name=id,payload=1 OR 1=1' \
                --session-id login           # 调用之间持久化Cookie
```
```
vigolium replay
```
是进程内
```
replay_request
```
工具的CLI接口。支持Agent接受的所有输入格式——
```
--record-uuid
```
、
```
--finding-id
```
或
```
--input
```
用于curl/原始HTTP/Burp XML/base64/URL/标准输入（
```
-
```
）。输出为稳定JSON：
```
result.baseline
```
、
```
result.replay
```
、
```
result.diff
```
（状态差异、长度差异、内容哈希、载荷反射、解释）。使用
```
--pretty
```
查看人类可读摘要。

持久化认证状态 — 多步骤流程（登录→CSRF→操作）需要在调用之间保留Cookie：

bash

vigolium replay --session-id login -i curl-login.sh         # 设置Cookie
vigolium replay --session-id login --record-uuid <action>   # 使用Cookie

Cookie Jar位于

~/.vigolium/replay-jars/<session-id>.json

；传递

--no-cookies

可选择不使用。

重放发现结果的证据 — 当发现结果来自导入源（审计、JSONL）且无关联记录时，
```
--finding-id
```
会回退到发现结果存储的请求/响应字节：
bash
```
vigolium replay --finding-id 42 -m 'name=q,payload=<svg/onload=alert(1)>'
```

在不同环境中确认 —

--target

重写目标地址，同时保留原始请求字节：

bash

vigolium replay --record-uuid <prod-uuid> --target https://staging.example.com

更新存储的基线 —
```
--in-replace
```
将重放的响应写回源记录（仅当源为存储的HTTPRecord时有效）：
bash
```
vigolium replay --record-uuid <uuid> -m '...' --in-replace
```

通过

HTTP_PROXY

HTTPS_PROXY

（或

--proxy

）路由流量以进行Burp检查。支持

--project-uuid

--project-name

进行项目范围限制。变异支持两种格式：

--mutate 'name=id,payload=1 OR 1=1'

或简写

--mutate 'id:URL_PARAM:1 OR 1=1'

。

16. Export and Reports

16. 导出与报告

bash

undefined

bash

undefined

Full JSONL export

完整JSONL导出

vigolium export --format jsonl -o full-export.jsonl

Export only findings

仅导出发现结果

vigolium export --only findings -o findings.jsonl

HTML report

HTML报告

vigolium export --format html -o report.html vigolium scan -t https://example.com --format html -o report.html

Multiple output formats at once

同时导出多种格式

vigolium scan -t https://example.com --format jsonl,html -o report.html

Database-level export

数据库级导出

vigolium db export -f csv -o records.csv vigolium db export -f markdown -o report.md vigolium db export --host example.com --from 2024-01-01

undefined

vigolium db export -f csv -o records.csv vigolium db export -f markdown -o report.md vigolium db export --host example.com --from 2024-01-01

undefined

17. Whitebox Scanning (Source-Aware)

17. 白盒扫描（源代码感知）

bash

undefined

bash

undefined

Link source code and scan

关联源代码并扫描

vigolium scan -t https://example.com --source ./src --strategy whitebox

Clone from git URL and scan

从Git URL克隆并扫描

vigolium scan -t https://example.com --source-url https://github.com/org/repo --strategy whitebox

Or link first, then scan

或先关联，再扫描

vigolium source add --hostname example.com --path ./src vigolium scan -t https://example.com --strategy whitebox

SAST-only phase

仅SAST阶段

vigolium run sast --sast-adhoc /path/to/app vigolium run sast --sast-adhoc /path/to/app --rule gin

SAST from git URL (clones automatically)

从Git URL进行SAST（自动克隆）

vigolium run sast --sast-adhoc https://github.com/org/repo

undefined

vigolium run sast --sast-adhoc https://github.com/org/repo

undefined

18. Configuration Tuning

18. 配置调优

bash

undefined

bash

undefined

View all config

查看所有配置

vigolium config ls

View specific section

查看特定章节

vigolium config ls scope vigolium config ls scanning_pace

Set values

设置值

vigolium config set scanning_strategy.default_strategy deep vigolium config set scope.origin.mode strict vigolium config set audit.extensions.enabled true

Speed tuning

速度调优

vigolium scan -t https://example.com -c 100 -r 200 --max-per-host 5

Scope tuning

范围调优

vigolium scan -t https://example.com --scope-origin strict

Scanning profile

扫描配置文件

vigolium scan -t https://example.com --scanning-profile aggressive

undefined

vigolium scan -t https://example.com --scanning-profile aggressive

undefined

18b. Cloud Storage (

vigolium storage

)

18b. 云存储（

vigolium storage

）

Manage cloud-storage objects scoped to the active project (mirrors

/api/storage/*

). Requires

storage.enabled: true

plus

driver

bucket

access_key

secret_key

vigolium-configs.yaml

(or

VIGOLIUM_STORAGE_ENABLED=true

bash

undefined

管理活动项目范围内的云存储对象（镜像

/api/storage/*

）。需要

storage.enabled: true

以及

vigolium-configs.yaml

中的

driver

、

bucket

、

access_key

、

secret_key

（或

VIGOLIUM_STORAGE_ENABLED=true

）。

bash

undefined

List all objects under the active project

列出活动项目下的所有对象

vigolium storage ls vigolium storage ls --prefix ugc/ # scope to a sub-path vigolium storage ls --tree # render as a directory tree vigolium storage ls --json # machine-readable

vigolium storage ls vigolium storage ls --prefix ugc/ # 限定子路径 vigolium storage ls --tree # 以目录树形式展示 vigolium storage ls --json # 机器可读格式

Upload a single file

上传单个文件

vigolium storage upload ./report.pdf # → ugc/report.pdf vigolium storage upload ./report.pdf --key reports/q4.pdf # explicit key vigolium storage upload ./report.pdf --content-type application/pdf

vigolium storage upload ./report.pdf # → ugc/report.pdf vigolium storage upload ./report.pdf --key reports/q4.pdf # 显式指定键 vigolium storage upload ./report.pdf --content-type application/pdf

Download an object (streams to stdout by default)

下载对象（默认流式输出到标准输出）

vigolium storage download ugc/report.pdf -o report.pdf

Download a scan's result bundle (tries native-scans/ then agentic-scans/)

下载扫描结果包（先尝试native-scans/，再尝试agentic-scans/）

vigolium storage results 550e8400-e29b-41d4-a716-446655440000

Generate a presigned GET or PUT URL for direct upload/download

生成预签名GET或PUT URL用于直接上传/下载

vigolium storage presign --key ugc/foo.tar.gz --method GET --expiry 1h vigolium storage presign --key ugc/foo.tar.gz --method PUT --expiry 30m --json

Delete one or more objects (prompts unless -F)

删除一个或多个对象（需确认，添加-F跳过）

vigolium storage rm ugc/foo.tar.gz vigolium storage rm ugc/a.pdf ugc/b.pdf -F


Many agent and scan commands accept a `--source gs://<project>/<key>` URL for source archives — they're downloaded, extracted (`.zip / .tar.gz / .tar.bz2 / .tar.xz`), and cleaned up automatically. Use `--upload-results` on `scan`, `agent autopilot`, `agent swarm`, `agent audit`, and `agent query` to bundle the session/output and push it to storage at the end of the run.

vigolium storage rm ugc/foo.tar.gz vigolium storage rm ugc/a.pdf ugc/b.pdf -F


许多Agent和扫描命令接受`--source gs://<project>/<key>` URL作为源代码归档——它们会自动下载、提取（`.zip / .tar.gz / .tar.bz2 / .tar.xz`）并清理。在`scan`、`agent autopilot`、`agent swarm`、`agent audit`和`agent query`命令中使用`--upload-results`可在运行结束时将会话/输出打包并上传到存储。

19. Project Management

19. 项目管理

bash

undefined

bash

undefined

Create a project

创建项目

vigolium project create my-project

List projects

列出项目

vigolium project list

Use a project (sets default for subsequent commands)

使用项目（为后续命令设置默认项目）

vigolium project use my-project

Scope CLI operations to a project

将CLI操作限定到项目

vigolium scan -t https://example.com --project-name my-project

Project-scoped database access

项目范围的数据库访问

VIGOLIUM_PROJECT=my-project vigolium db stats

undefined

VIGOLIUM_PROJECT=my-project vigolium db stats

undefined

20. Writing and Running Custom Extensions

20. 编写与运行自定义扩展

bash

undefined

bash

undefined

Install preset examples

安装预设示例

vigolium ext preset

View API reference

查看API参考

vigolium ext docs vigolium ext docs --example

Quick-test JS code inline

快速内联测试JS代码

vigolium ext eval 'vigolium.log.info("hello")' vigolium ext eval --ext-file script.js

Run a custom extension against a target

针对目标运行自定义扩展

vigolium run extension -t https://example.com --ext custom-check.js

Run during a full scan (extensions run alongside built-in modules)

在完整扫描期间运行（扩展与内置模块并行运行）

vigolium scan -t https://example.com --ext custom-check.js

Run only extensions, skip built-in modules

仅运行扩展，跳过内置模块

vigolium scan -t https://example.com --only extension --ext custom-check.js

undefined

vigolium scan -t https://example.com --only extension --ext custom-check.js

undefined

21. JavaScript Execution (vigolium js)

21. JavaScript执行（vigolium js）

bash

undefined

bash

undefined

Execute inline JS with full vigolium.* API access

内联执行JS代码，完整访问vigolium.* API

vigolium js --code 'vigolium.http.get("https://example.com/api/health")'

Execute JS from a file

从文件执行JS代码

vigolium js --code-file scanner-script.js

TypeScript auto-transpilation

TypeScript自动转译

vigolium js --code-file scanner.ts

From stdin (ideal for agent/pipe workflows)

从标准输入执行（适合Agent/管道工作流）

echo 'vigolium.utils.md5("password123")' | vigolium js

With target context (accessible as TARGET variable)

带目标上下文（可通过TARGET变量访问）

vigolium js --target https://example.com --code 'vigolium.http.get(TARGET + "/api/users")'

Custom timeout and text output format

自定义超时和文本输出格式

vigolium js --timeout 60s --format text --code 'vigolium.utils.sha256("hello")'

Complex scripting: ingest, query, and annotate

复杂脚本：采集、查询和注释

vigolium js --code-file <<'EOF' > /dev/null var records = vigolium.db.records.query({ hostname: "example.com", limit: 10 }); for (var i = 0; i < records.length; i++) { var parsed = vigolium.parse.url(records[i].url); if (vigolium.utils.hasDynamicSegment(parsed.path)) { vigolium.db.records.annotate(records[i].uuid, { risk_score: 50 }); vigolium.log.info("Flagged: " + records[i].url); } } EOF

undefined

undefined

22. Session Logs (vigolium log)

22. 会话日志（vigolium log）

bash

undefined

bash

undefined

List all native + agentic sessions with log status

列出所有原生+Agent会话及日志状态

vigolium log ls vigolium log # same as

log ls

when no UUID is given

vigolium log ls vigolium log # 无UUID时等价于

log ls

View a session's runtime.log (auto-follows if the session is still running)

查看会话的runtime.log（会话运行时自动跟踪）

vigolium log <scan-or-agent-uuid>

Tail last N lines

查看最后N行

vigolium log <uuid> --tail 500

Show the full log

查看完整日志

vigolium log <uuid> --full

Follow live output (tail -f)

实时跟踪输出（tail -f）

vigolium log <uuid> -f

Strip ANSI color codes (useful when piping to a file)

去除ANSI颜色代码（适合管道输出到文件）

vigolium log <uuid> --strip-ansi > run.txt

Interactive TUI picker

交互式TUI选择器

vigolium log --tui


Log lookup order: agentic session `~/.vigolium/agent-sessions/<uuid>/runtime.log` → native session `~/.vigolium/native-sessions/<uuid>/runtime.log` → `scan_logs` DB table (fallback when `scanning_strategy.scan_logs.persist_logs` is disabled). The legacy `run.log` filename is still resolved for older sessions.

vigolium log --tui


日志查找顺序：Agent会话`~/.vigolium/agent-sessions/<uuid>/runtime.log` → 原生会话`~/.vigolium/native-sessions/<uuid>/runtime.log` → `scan_logs`数据库表（当`scanning_strategy.scan_logs.persist_logs`禁用时作为回退）。旧会话仍支持解析遗留的`run.log`文件名。

23. Data Import (vigolium import)

23. 数据导入（vigolium import）

bash

undefined

bash

undefined

Import an audit output folder (contains audit-state.json + findings-draft/)

导入审计输出文件夹（包含audit-state.json + findings-draft/）

vigolium import /path/to/vigolium-results/

Import a JSONL export (supports http_record and finding envelopes)

导入JSONL导出文件（支持http_record和finding信封）

vigolium import scan-results.jsonl vigolium import /tmp/demo/juice-shop.jsonl


Audit output folders (produced by `vigolium agent audit` — vigolium-audit or piolium leg) create a new agentic_scan row plus findings. JSONL imports accept `{"type": "http_record", "data": {...}}` and `{"type": "finding", "data": {...}}` envelopes — the format produced by `vigolium export --format jsonl`.

vigolium import scan-results.jsonl vigolium import /tmp/demo/juice-shop.jsonl


审计输出文件夹（由`vigolium agent audit`生成——vigolium-audit或piolium端）会创建新的agentic_scan记录及发现结果。JSONL导入接受`{"type": "http_record", "data": {...}}`和`{"type": "finding", "data": {...}}`信封格式——即`vigolium export --format jsonl`生成的格式。

24. Initialization & Reset

24. 初始化与重置

bash

undefined

bash

undefined

Create ~/.vigolium with defaults (config, DB schema, profiles, prompts, extensions, SAST rules)

使用默认值创建~/.vigolium/（配置、数据库架构、配置文件、提示、扩展、SAST规则）

vigolium init

Regenerate the API key and re-extract all preset data

重新生成API密钥并重新提取所有预设数据

vigolium init --force

Wipe ~/.vigolium entirely and reinitialize (prompts for confirmation; use -F/--force to skip)

完全清空~/.vigolium/并重新初始化（需确认；使用-F/--force跳过）

vigolium config clean

Diagnose installation health (binaries, paths, permissions)

诊断安装健康状况（二进制文件、路径、权限）

vigolium doctor

undefined

vigolium doctor

undefined

Key Global Flags

全局关键标志

These flags are available on all commands (persistent flags on root):

Flag	Short	Default	Description
`--target`	`-t`	—	Target URL (repeatable)
`--target-file`	`-T`	—	File containing target URLs
`--input`	`-i`	`-` (stdin)	Input file path
`--input-mode`	`-I`	`urls`	Input format (openapi, burp, curl, har, etc.)
`--input-read-timeout`	—	`3m`	Timeout for reading input from stdin or file
`--concurrency`	`-c`	`50`	Concurrent scan workers
`--rate-limit`	`-r`	`100`	Max requests per second
`--max-per-host`	—	`30`	Max concurrent requests per host
`--max-host-error`	—	`30`	Skip host after this many consecutive errors
`--max-findings-per-module`	—	`10`	Stop reporting after N findings per module (0 = unlimited)
`--timeout`	—	`15s`	HTTP request timeout
`--scanning-max-duration`	—	—	Maximum total scan duration (e.g. 1h, 30m)
`--proxy`	—	—	HTTP/SOCKS5 proxy URL
`--modules`	`-m`	`all`	Scanner modules to enable (fuzzy match on ID/name)
`--module-tag`	—	—	Filter modules by tag (OR condition, repeatable)
`--strategy`	—	—	Scanning strategy preset (lite, balanced, deep, whitebox)
`--scanning-profile`	—	—	Scanning profile name or YAML file path
`--intensity`	—	—	Scan intensity preset: `quick` , `balanced` , `deep` (maps to profile + strategy)
`--heuristics-check`	—	`basic`	Pre-scan heuristics level: `none` , `basic` , `advanced`
`--skip-heuristics`	—	`false`	Disable pre-scan heuristics (same as `--heuristics-check=none` )
`--only`	—	—	Run only a single phase
`--skip`	—	—	Skip specific phases
`--format`	—	`console`	Output format: console, jsonl, html (comma-separated for multiple)
`--scan-on-receive`	`-S`	`false`	Continuously scan new HTTP records as they arrive in the database
`--full-native-scan-on-receive`	—	`false`	Run the full native scan pipeline (discovery + spidering + dynamic-assessment) continuously on received records
`--source`	—	—	Path to application source code
`--source-url`	—	—	Git URL to clone for source-aware scanning
`--scan-id`	—	—	Label for grouping scan session results
`--scope-origin`	—	—	Origin scope: all, relaxed, balanced, strict
`--project-id`	—	—	Project UUID to scope all operations to
`--project-name`	—	—	Project name to scope all operations to
`--verbose`	`-v`	`false`	Verbose logging
`--silent`	—	`false`	Suppress all output except findings
`--json`	`-j`	`false`	Format output as JSONL (one JSON object per line)
`--ci-output-format`	—	`false`	CI-friendly output: JSONL findings only, no color, no banners
`--debug`	—	`false`	Dump raw HTTP traffic
`--dump-traffic`	—	`false`	Print every HTTP request/response pair to stderr (Burp-style)
`--log-file`	—	—	Write all log output to this file (JSON format)
`--db`	—	`~/.vigolium/database-vgnm.sqlite`	SQLite database path
`--config`	—	`~/.vigolium/vigolium-configs.yaml`	Config file path
`--stateless`	—	`false`	Use a temporary database, export results to `--output` , then discard
`--no-clustering`	—	`false`	Disable de-duplication of identical concurrent HTTP requests
`--force`	`-F`	`false`	Skip confirmation prompts
`--list-modules`	`-M`	`false`	List all scanner modules
`--list-input-mode`	—	`false`	List all supported input modes with examples
`--watch`	—	—	Re-run on interval (e.g. 10s, 1m, 5m)
`--width`	—	`70`	Max column width for tables
`--ext`	—	—	Load JavaScript extension script (repeatable)
`--ext-dir`	—	—	Override extension scripts directory
`--full-example`	—	`false`	Show full example commands organized by section

这些标志适用于所有命令（根命令的持久标志）：

标志	简写	默认值	描述
`--target`	`-t`	—	目标URL（可重复）
`--target-file`	`-T`	—	包含目标URL的文件
`--input`	`-i`	`-` （标准输入）	输入文件路径
`--input-mode`	`-I`	`urls`	输入格式（openapi、burp、curl、har等）
`--input-read-timeout`	—	`3m`	从标准输入或文件读取输入的超时时间
`--concurrency`	`-c`	`50`	并发扫描工作线程数
`--rate-limit`	`-r`	`100`	每秒最大请求数
`--max-per-host`	—	`30`	每个主机的最大并发请求数
`--max-host-error`	—	`30`	连续错误达到此数量后跳过主机
`--max-findings-per-module`	—	`10`	每个模块报告的最大发现结果数（0表示无限制）
`--timeout`	—	`15s`	HTTP请求超时时间
`--scanning-max-duration`	—	—	扫描总时长上限（例如1h、30m）
`--proxy`	—	—	HTTP/SOCKS5代理URL
`--modules`	`-m`	`all`	要启用的扫描器模块（按ID/名称模糊匹配）
`--module-tag`	—	—	按标签过滤模块（OR逻辑，可重复）
`--strategy`	—	—	扫描策略预设（lite、balanced、deep、whitebox）
`--scanning-profile`	—	—	扫描配置文件名称或YAML文件路径
`--intensity`	—	—	扫描强度预设： `quick` 、 `balanced` 、 `deep` （映射到配置文件+策略）
`--heuristics-check`	—	`basic`	预扫描启发式检查级别： `none` 、 `basic` 、 `advanced`
`--skip-heuristics`	—	`false`	禁用预扫描启发式检查（等价于 `--heuristics-check=none` ）
`--only`	—	—	仅运行单个阶段
`--skip`	—	—	跳过特定阶段
`--format`	—	`console`	输出格式：console、jsonl、html（逗号分隔支持多种格式）
`--scan-on-receive`	`-S`	`false`	数据库中收到新HTTP记录时持续扫描
`--full-native-scan-on-receive`	—	`false`	持续对收到的记录运行完整原生扫描流水线（发现+爬取+动态评估）
`--source`	—	—	应用源代码路径
`--source-url`	—	—	用于源代码感知扫描的Git URL（自动克隆）
`--scan-id`	—	—	用于分组扫描会话结果的标签
`--scope-origin`	—	—	源范围：all、relaxed、balanced、strict
`--project-id`	—	—	用于限定所有操作范围的项目UUID
`--project-name`	—	—	用于限定所有操作范围的项目名称
`--verbose`	`-v`	`false`	详细日志
`--silent`	—	`false`	仅输出发现结果，抑制其他所有输出
`--json`	`-j`	`false`	输出格式为JSONL（每行一个JSON对象）
`--ci-output-format`	—	`false`	CI友好输出：仅JSONL发现结果，无颜色，无横幅
`--debug`	—	`false`	转储原始HTTP流量
`--dump-traffic`	—	`false`	将每个HTTP请求/响应对打印到标准错误（Burp风格）
`--log-file`	—	—	将所有日志输出写入此文件（JSON格式）
`--db`	—	`~/.vigolium/database-vgnm.sqlite`	SQLite数据库路径
`--config`	—	`~/.vigolium/vigolium-configs.yaml`	配置文件路径
`--stateless`	—	`false`	使用临时数据库，将结果导出到 `--output` 后丢弃
`--no-clustering`	—	`false`	禁用相同并发HTTP请求的去重
`--force`	`-F`	`false`	跳过确认提示
`--list-modules`	`-M`	`false`	列出所有扫描器模块
`--list-input-mode`	—	`false`	列出所有支持的输入模式及示例
`--watch`	—	—	按间隔重新运行（例如10s、1m、5m）
`--width`	—	`70`	表格的最大列宽
`--ext`	—	—	加载JavaScript扩展脚本（可重复）
`--ext-dir`	—	—	覆盖扩展脚本目录
`--full-example`	—	`false`	按章节显示完整示例命令

Scan-Specific Flags

扫描专用标志

These flags apply to

scan

scan-url

scan-request

, and

run

commands:

Flag	Short	Default	Description
`--output`	`-o`	—	Write findings / reports to this file path
`--stats`	—	`false`	Show live progress stats during scanning
`--include-response`	—	`false`	Include full HTTP response body in output
`--omit-response`	—	`false`	Omit raw HTTP request/response bytes from the output file (keeps metadata, smaller files)
`--retries`	—	`1`	Number of retry attempts for failed requests
`--stream`	—	`false`	Process targets as a stream without buffering or deduplication
`--header`	`-H`	—	Add custom HTTP header (repeatable, e.g. `-H 'Auth: Bearer tok'` )
`--advanced-options`	`-a`	—	Module-specific options as key=value (e.g. `-a xss.dom=true` )
`--required-only`	—	`false`	Parse only required fields from input format (ignore optional)
`--skip-format-validation`	—	`false`	Skip validation of input file format
`--upload-results`	—	`false`	Upload scan results to cloud storage after completion (requires storage config)
`--stateless`	—	`false`	Use a temporary database, export to `--output` , then discard
`--auth-file`	—	—	Path to auth file (YAML/JSON: single session or `sessions:` bundle), or bare name resolved against `scanning_strategy.session.session_dir` . Repeatable.
`--auth`	—	—	Inline session in `name:Header:value` format. Repeatable.
`--oast-url`	—	—	Fixed out-of-band callback URL
`--discover`	—	`false`	Enable content discovery phase before scanning
`--discover-max-time`	—	`1h`	Max time for content discovery per target
`--fuzz-wordlist`	—	—	Custom fuzz wordlist path (enables fuzzing during discovery)
`--no-prefix-breaker`	—	`false`	Disable per-prefix circuit breaker that stops trap-directory recursion
`--spider`	—	`false`	Enable browser-based spidering phase before scanning
`--spider-max-time`	—	`30m`	Max time for spidering per target
`--browser-engine`	`-E`	`chromium`	Browser engine: `chromium` , `ungoogled` , `fingerprint`
`--browsers`	`-b`	`1`	Number of parallel browser instances for spidering
`--headless`	—	`true`	Run browser in headless mode
`--no-cdp`	—	`false`	Disable Chrome DevTools Protocol event listener detection
`--no-forms`	—	`false`	Disable automatic form detection and filling
`--external-harvest`	—	`false`	Enable external intelligence gathering (Wayback, CT logs, etc.)
`--known-issue-scan-tags`	—	—	Nuclei template tags to include (repeatable)
`--known-issue-scan-severities`	—	—	Filter Nuclei templates by severity (repeatable)
`--known-issue-scan-exclude-tags`	—	—	Nuclei template tags to exclude (repeatable)
`--known-issue-scan-templates-dir`	—	—	Custom Nuclei templates directory
`--sast-adhoc`	—	—	Local path or git URL for ad-hoc SAST scan (auto-detected)
`--rule`	—	—	Filter SAST rules by fuzzy name match

这些标志适用于

scan

、

scan-url

、

scan-request

和

run

命令：

标志	简写	默认值	描述
`--output`	`-o`	—	将发现结果/报告写入此文件路径
`--stats`	—	`false`	扫描期间显示实时进度统计
`--include-response`	—	`false`	输出中包含完整HTTP响应体
`--omit-response`	—	`false`	输出文件中省略原始HTTP请求/响应字节（保留元数据，文件更小）
`--retries`	—	`1`	失败请求的重试次数
`--stream`	—	`false`	流式处理目标，不缓冲或去重
`--header`	`-H`	—	添加自定义HTTP头（可重复，例如 `-H 'Auth: Bearer tok'` ）
`--advanced-options`	`-a`	—	模块特定选项，格式为key=value（例如 `-a xss.dom=true` ）
`--required-only`	—	`false`	仅解析输入格式中的必填字段（忽略可选字段）
`--skip-format-validation`	—	`false`	跳过输入文件格式验证
`--upload-results`	—	`false`	扫描完成后将结果上传到云存储（需要存储配置）
`--stateless`	—	`false`	使用临时数据库，导出到 `--output` 后丢弃
`--auth-file`	—	—	认证文件路径（YAML/JSON：单个会话或 `sessions:` 集合），或在 `scanning_strategy.session.session_dir` 中解析的名称。可重复。
`--auth`	—	—	内联会话，格式为 `name:Header:value` 。可重复。
`--oast-url`	—	—	固定的带外回调URL
`--discover`	—	`false`	扫描前启用内容发现阶段
`--discover-max-time`	—	`1h`	每个目标的内容发现最长时间
`--fuzz-wordlist`	—	—	自定义模糊测试词表路径（启用发现期间的模糊测试）
`--no-prefix-breaker`	—	`false`	禁用前缀断路器，停止陷阱目录递归
`--spider`	—	`false`	扫描前启用基于浏览器的爬取阶段
`--spider-max-time`	—	`30m`	每个目标的爬取最长时间
`--browser-engine`	`-E`	`chromium`	浏览器引擎： `chromium` 、 `ungoogled` 、 `fingerprint`
`--browsers`	`-b`	`1`	爬取的并行浏览器实例数
`--headless`	—	`true`	以无头模式运行浏览器
`--no-cdp`	—	`false`	禁用Chrome DevTools Protocol事件监听器检测
`--no-forms`	—	`false`	禁用自动表单检测和填充
`--external-harvest`	—	`false`	启用外部情报收集（Wayback、CT日志等）
`--known-issue-scan-tags`	—	—	要包含的Nuclei模板标签（可重复）
`--known-issue-scan-severities`	—	—	按严重性过滤Nuclei模板（可重复）
`--known-issue-scan-exclude-tags`	—	—	要排除的Nuclei模板标签（可重复）
`--known-issue-scan-templates-dir`	—	—	自定义Nuclei模板目录
`--sast-adhoc`	—	—	临时SAST扫描的本地路径或Git URL（自动检测）
`--rule`	—	—	按模糊名称匹配过滤SAST规则

Constraints

约束条件

```
--only
```
and
```
--skip
```
are mutually exclusive

--format html

requires

-o/--output

; multiple

--format

values also require

-o/--output

```
--format html
```
is only supported for the
```
discovery
```
and
```
spidering
```
phases when combined with
```
--only
```
```
--target/-t
```
and
```
--spec-url
```
are mutually exclusive for ingest
```
--source
```
and
```
--source-url
```
are mutually exclusive
```
--stateless
```
requires
```
-o/--output
```
;
```
--stateless
```
and
```
--db
```
are mutually exclusive
```
--ci-output-format
```
sets JSONL output, suppresses banners and color (implies
```
--json --silent
```
)

--skip-heuristics

is equivalent to

--heuristics-check=none

Server mode requires API key auth by default (use
```
-A
```
/
```
--no-auth
```
to disable, or set
```
VIGOLIUM_API_KEY
```
)

Agent commands route every dispatch through the in-process olium engine; configure under

agent.olium.*

vigolium-configs.yaml

. Default provider

openai-compatible

points at a local Ollama (

http://localhost:11434/v1

, model

gemma4:latest

) via

custom_provider

openai-codex-oauth

reads

~/.codex/auth.json

;

anthropic-cli

needs

claude

in PATH;

anthropic-vertex

(Claude,

claude-*

model) and

google-vertex

(Gemini,

gemini-*

model) need a GCP service-account JSON via

--oauth-cred

$GOOGLE_APPLICATION_CREDENTIALS

The

--provider

--model

--oauth-cred

--oauth-token

--llm-api-key

--gcp-project

--gcp-location

flags override

agent.olium.*

for one run on

agent query

agent autopilot

agent swarm

, and

agent olium

(and the top-level

vigolium olium

ol

alias)

```
--scan-on-receive/-S
```
is ignored in remote ingest mode (server handles scanning)
```
db clean --all
```
requires
```
--force
```
for safety
```
db clean --force
```
with no filter flags resets the entire database (SQLite only)
Whitebox/SAST phases require
```
--source <path>
```
or
```
--source-url <git-url>
```
to link application source code

Phase aliases:

deparos

discover

discovery

spitolas

spidering

ext

extension

. The legacy alias

dynamic-assessment

is accepted for

audit

```
--module-tag
```
uses OR logic: modules matching any specified tag are included
```
-m
```
and
```
--module-tag
```
merge results (union)
Use
```
agent swarm --discover
```
for full-scope AI-guided scanning

Agent swarm:

--source-analysis-only

requires

--source

;

--browser-auth

requires

--browser

;

--audit

requires

--source

;

--target

is required when

--source

is used with a remote target

Agent autopilot: when
```
--source
```
is set, an audit harness runs automatically — auto-picks piolium if
```
pi
```
+piolium are installed, otherwise the embedded vigolium-audit at lite. Force with
```
--piolium <mode>
```
(auto-disables vigolium-audit) or
```
--audit <mode>
```
; disable with
```
--audit=off
```
.
```
--max-duration
```
default is
```
6h
```
(there is no
```
--max-commands
```
/
```
--token-budget
```
flag — the command budget is set by
```
--intensity
```
).
```
--triage
```
runs an AI triage pass after the scan;
```
--disable-guardrail
```
skips the prompt-safety classifier on the natural-language prompt
Agent audit:
```
--driver
```
must be
```
auto
```
(default),
```
both
```
,
```
audit
```
, or
```
piolium
```
.
```
auto
```
runs vigolium-audit and only falls back to piolium when the resolved claude/codex CLI is missing;
```
both
```
runs audit then piolium unconditionally. Under
```
auto
```
/
```
both
```
,
```
--mode
```
is restricted to the shared set (
```
lite
```
,
```
balanced
```
,
```
deep
```
,
```
revisit
```
,
```
confirm
```
,
```
merge
```
); driver-specific modes (audit's
```
reinvest
```
/
```
refresh
```
/
```
mock
```
/
```
diff
```
/
```
status
```
, piolium's
```
longshot
```
/
```
smoke
```
/
```
diff
```
/
```
status
```
) require forcing
```
--driver=audit|piolium
```
.
```
--intensity deep
```
resolves to the chain
```
deep,confirm
```
;
```
--modes a,b,c
```
chains modes. Audit-leg agent is selected by
```
--provider
```
(anthropic-→claude, openai-→codex) and
```
--agent {claude|codex}
```
, with BYOK via
```
--api-key
```
/
```
--oauth-token
```
/
```
--oauth-cred-file
```
.
```
-i/--interactive
```
hands you the audit harness (audit-only).
```
--driver=audit\|piolium
```
hard-errors on a missing runtime; under
```
both
```
a missing runtime is dropped with a warning. Post-pass project-wide findings dedup runs when a project UUID is set; suppress with
```
--no-dedup
```
Agent piolium:
```
--mode
```
must be one of
```
lite
```
,
```
balanced
```
,
```
deep
```
,
```
revisit
```
,
```
confirm
```
,
```
merge
```
,
```
diff
```
,
```
longshot
```
,
```
status
```
,
```
smoke
```
. Requires
```
pi
```
in PATH and the piolium Pi extension installed.
```
--no-preflight
```
skips the pre-audit
```
pi
```
roundtrip
Intensity presets (
```
--intensity quick|balanced|deep
```
) are shared across
```
scan
```
,
```
agent autopilot
```
,
```
agent swarm
```
,
```
agent audit
```
; explicit flags always override the preset
```
vigolium storage *
```
commands require
```
storage.enabled: true
```
(or
```
VIGOLIUM_STORAGE_ENABLED=true
```
) plus driver/bucket/access-key/secret-key configured. They scope to the active project (
```
--project-id
```
/
```
--project-name
```
/
```
VIGOLIUM_PROJECT
```
)
```
--source
```
accepts a local path, a git URL (auto-cloned with
```
--commit-depth
```
), a local archive (
```
.zip / .tar.gz / .tar.bz2 / .tar.xz
```
— auto-extracted), or a
```
gs://<project>/<key>
```
URI (downloaded + extracted). Applies to
```
agent audit
```
```
vigolium init
```
is a no-op on an existing installation unless
```
--force
```
is passed (regenerates API key + re-extracts preset data)
```
vigolium config clean
```
prompts for confirmation unless
```
-F/--force
```
is passed; it wipes the entire
```
~/.vigolium/
```
directory

```
--only
```
和
```
--skip
```
互斥

--format html

需要

-o/--output

；多个

--format

值也需要

-o/--output

```
--format html
```
仅在结合
```
--only
```
时支持
```
discovery
```
和
```
spidering
```
阶段
采集时
```
--target/-t
```
和
```
--spec-url
```
互斥
```
--source
```
和
```
--source-url
```
互斥
```
--stateless
```
需要
```
-o/--output
```
；
```
--stateless
```
和
```
--db
```
互斥
```
--ci-output-format
```
设置JSONL输出，抑制横幅和颜色（隐含
```
--json --silent
```
）

--skip-heuristics

等价于

--heuristics-check=none

服务器模式默认需要API密钥认证（使用
```
-A
```
/
```
--no-auth
```
禁用，或设置
```
VIGOLIUM_API_KEY
```
）

Agent命令的所有调度都通过进程内olium引擎；在

vigolium-configs.yaml

的

agent.olium.*

下配置。默认提供商

openai-compatible

通过

custom_provider

指向本地Ollama（

http://localhost:11434/v1

，模型

gemma4:latest

）。

openai-codex-oauth

读取

~/.codex/auth.json

；

anthropic-cli

需要

claude

在PATH中；

anthropic-vertex

（Claude，

claude-*

模型）和

google-vertex

（Gemini，

gemini-*

模型）需要通过

--oauth-cred

或

$GOOGLE_APPLICATION_CREDENTIALS

提供GCP服务账户JSON

--provider

、

--model

、

--oauth-cred

、

--oauth-token

、

--llm-api-key

、

--gcp-project

、

--gcp-location

标志会在

agent query

、

agent autopilot

、

agent swarm

和

agent olium

（以及顶级

vigolium olium

ol

别名）的单次运行中覆盖

agent.olium.*

设置

远程采集模式下忽略
```
--scan-on-receive/-S
```
（由服务器处理扫描）
```
db clean --all
```
需要
```
--force
```
以确保安全
无过滤标志时
```
db clean --force
```
会重置整个数据库（仅SQLite）
Whitebox/SAST阶段需要
```
--source <path>
```
或
```
--source-url <git-url>
```
关联应用源代码

阶段别名：

deparos

discover

discovery

，

spitolas

spidering

，

ext

extension

。仍接受旧别名

dynamic-assessment

作为

audit

的替代

```
--module-tag
```
使用OR逻辑：匹配任意指定标签的模块都会被包含
```
-m
```
和
```
--module-tag
```
合并结果（并集）
使用
```
agent swarm --discover
```
进行全范围AI引导扫描

Agent swarm：

--source-analysis-only

需要

--source

；

--browser-auth

需要

--browser

；

--audit

需要

--source

；当

--source

用于远程目标时需要

--target

Agent autopilot：设置
```
--source
```
时会自动运行审计工具——如果安装了
```
pi
```
+piolium则自动选择piolium，否则使用嵌入式vigolium-audit的lite模式。使用
```
--piolium <mode>
```
强制使用piolium（自动禁用vigolium-audit）或
```
--audit <mode>
```
强制使用vigolium-audit；使用
```
--audit=off
```
禁用两者。
```
--max-duration
```
默认值为
```
6h
```
（没有
```
--max-commands
```
/
```
--token-budget
```
标志——命令预算由
```
--intensity
```
设置）。
```
--triage
```
会在扫描后运行AI分类；
```
--disable-guardrail
```
跳过自然语言提示的安全分类器
Agent audit：
```
--driver
```
必须为
```
auto
```
（默认）、
```
both
```
、
```
audit
```
或
```
piolium
```
。
```
auto
```
运行vigolium-audit，仅当缺少解析后的claude/codex CLI时回退到piolium；
```
both
```
无条件先运行audit再运行piolium。在
```
auto
```
/
```
both
```
模式下，
```
--mode
```
限制为共享集合（
```
lite
```
,
```
balanced
```
,
```
deep
```
,
```
revisit
```
,
```
confirm
```
,
```
merge
```
）；驱动特定模式（audit的
```
reinvest
```
/
```
refresh
```
/
```
mock
```
/
```
diff
```
/
```
status
```
，piolium的
```
longshot
```
/
```
smoke
```
/
```
diff
```
/
```
status
```
）需要强制设置
```
--driver=audit|piolium
```
。
```
--intensity deep
```
解析为链式模式
```
deep,confirm
```
；
```
--modes a,b,c
```
链式运行多个模式。审计端Agent由
```
--provider
```
（anthropic-→claude，openai-→codex）和
```
--agent {claude|codex}
```
选择，支持通过
```
--api-key
```
/
```
--oauth-token
```
/
```
--oauth-cred-file
```
使用自定义密钥。
```
-i/--interactive
```
将审计工具交给用户（仅audit支持）。
```
--driver=audit\|piolium
```
在运行时缺失时会报错；在
```
both
```
模式下缺失运行时会发出警告并跳过。设置项目UUID时会运行项目级发现结果去重；使用
```
--no-dedup
```
抑制
Agent piolium：
```
--mode
```
必须为
```
lite
```
,
```
balanced
```
,
```
deep
```
,
```
revisit
```
,
```
confirm
```
,
```
merge
```
,
```
diff
```
,
```
longshot
```
,
```
status
```
,
```
smoke
```
之一。需要
```
pi
```
在PATH中且已安装piolium Pi扩展。
```
--no-preflight
```
跳过审计前的
```
pi
```
往返检查
强度预设（
```
--intensity quick|balanced|deep
```
）在
```
scan
```
、
```
agent autopilot
```
、
```
agent swarm
```
、
```
agent audit
```
之间共享；显式标志始终覆盖预设
```
vigolium storage *
```
命令需要
```
storage.enabled: true
```
（或
```
VIGOLIUM_STORAGE_ENABLED=true
```
）以及已配置的driver/bucket/access-key/secret-key。它们限定到活动项目（
```
--project-id
```
/
```
--project-name
```
/
```
VIGOLIUM_PROJECT
```
）
```
--source
```
接受本地路径、Git URL（自动克隆，支持
```
--commit-depth
```
）、本地归档（
```
.zip / .tar.gz / .tar.bz2 / .tar.xz
```
——自动提取）或
```
gs://<project>/<key>
```
URI（下载+提取）。适用于
```
agent audit
```
现有安装上
```
vigolium init
```
是无操作，除非传递
```
--force
```
（重新生成API密钥+重新提取预设数据）
```
vigolium config clean
```
需要确认，除非传递
```
-F/--force
```
；它会清空整个
```
~/.vigolium/
```
目录

Resources

资源

Website: www.vigolium.com
Documentation: docs.vigolium.com
GitHub: github.com/vigolium/vigolium

官网: www.vigolium.com
文档: docs.vigolium.com
GitHub: github.com/vigolium/vigolium