vt

package

v0.12.0 Latest Latest Go to latest Published: Mar 10, 2026 License: Apache-2.0 Imports: 13 Imported by: 0

Details

Search threat indicators (IP addresses, domains, file hashes, URLs) from VirusTotal for malware and threat intelligence analysis.

Environment Variable	CLI Flag	Required	Description
`WARREN_VT_API_KEY`	`--vt-api-key`	Yes	VirusTotal API key
`WARREN_VT_BASE_URL`	`--vt-base-url`	No	Base URL (default: `https://www.virustotal.com/api/v3`)

Function	Description
`vt_ip`	Search IPv4/IPv6 address reputation and associated information
`vt_domain`	Search domain reputation, DNS records, and associated information
`vt_file_hash`	Search file hash (MD5/SHA1/SHA256) for malware analysis results
`vt_url`	Search URL for scan results and reputation

The tool is automatically enabled when the API key is configured. It is skipped if the key is not set.

This section is empty.

This section is empty.

This section is empty.

type Action struct {
	// contains filtered or unexported fields
}

func (x *Action) Configure(ctx context.Context) error

func (x *Action) Flags() []cli.Flag

func (x *Action) Helper() *cli.Command

func (x *Action) LogValue() slog.Value

func (x *Action) Name() string

func (x *Action) Prompt(ctx context.Context) (string, error)

Prompt returns additional instructions for the system prompt

func (x *Action) Run(ctx context.Context, name string, args map[string]any) (map[string]any, error)

func (x *Action) Specs(ctx context.Context) ([]gollem.ToolSpec, error)