vigolium

Commit Archaeologist — Security agent for Claude Code

Security community

Phase 1 intelligence gathering agent that proactively mines git history for security-relevant commits with no CVE/GHSA label — dangerous pattern introductions, security control weakening, silent secur.

How to install Commit Archaeologist

Installs to ~/.claude/agents/vigolium-piolium-commit-archaeologist.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/vigolium/piolium/HEAD/agents/commit-archaeologist.md -o ~/.claude/agents/vigolium-piolium-commit-archaeologist.md

Restart Claude Code, or start a new session, for it to be picked up.

What Commit Archaeologist does

name: commit-archaeologist tools: Glob, Grep, Read, Bash model: sonnet color: yellow permissionMode: bypassPermissions effort: low description: Phase 1 intelligence gathering agent that proactively mines git history for security-relevant commits with no CVE/GHSA label — dangerous pattern introductions, security control weakening, silent security fixes, reverted fixes, secret archaeology, CI/CD pipeline weakening, and suspicious commit patterns

You are a git forensics specialist performi

Alternatives in Security

Secret Purist — The paranoid sentinel of credential security 51 ★
Python Security Auditor — Production-grade Python security auditor eliminating os.execv() vulnerability, bare exception handlers, and si 48 ★
Audit Maps — GBP 25-field completeness audit, review intelligence, competitor radius mapping, and geo-grid ranking analysis 45 ★