nsauditor-ai-agent-skill

v0.1.38

Published

13 hours ago

AI Agent Skill for NSAuditor AI — gives any AI coding agent built-in knowledge of NSAuditor's MCP tools, schemas, plugins, and security audit workflows.

NSAuditor AI Agent Skill

Give any AI coding agent instant fluency with NSAuditor AI.

An installable knowledge package that teaches AI coding agents how to use NSAuditor AI's MCP tools, understand its data schemas, and orchestrate multi-step security audit workflows — without requiring manual context every conversation.

Works with Claude Code, Claude Desktop, Cursor, Windsurf, VS Code Copilot, and any MCP-aware agent.

What's Inside

nsauditor-ai-agent-skill/
├── SKILL.md                          # Main entrypoint — triggers, tools, schemas, constraints
├── references/
│   ├── workflows.md                  # Multi-step workflow recipes (full audit, CI/CD, CTEM)
│   ├── schemas.md                    # Complete data structures (scan results, CVEs, findings)
│   └── plugins.md                    # Full plugin catalog (50 scanners with ports & protocols — 17 core + 6 discovery + 3 pro + 24 enterprise)
├── examples/
│   └── agent-interactions.md         # Example agent reasoning chains (9 scenarios)
├── package.json
├── README.md
└── LICENSE

Quick Start

Claude Code

# Option 1: Install globally and copy
npm install -g nsauditor-ai-agent-skill
cp -r $(npm root -g)/nsauditor-ai-agent-skill ~/.claude/skills/nsauditor-ai

# Option 2: Copy into your project
cp -r nsauditor-ai-agent-skill .claude/skills/nsauditor-ai

Claude Code auto-discovers skills in .claude/skills/.

Claude Desktop

Upload SKILL.md as project knowledge in your Claude Desktop project settings.

Cursor

Copy the skill directory into .cursor/skills/ or add SKILL.md content to your project rules.

Windsurf

Copy to your project's context directory, or paste SKILL.md into project rules.

VS Code Copilot

Add SKILL.md to .github/copilot-instructions.md or your workspace's Copilot context.

Generic / Custom Agents

npm install nsauditor-ai-agent-skill
# Copy into wherever your agent loads skills/context from
cp -r node_modules/nsauditor-ai-agent-skill /path/to/agent/skills/nsauditor-ai

What the Agent Learns

When an AI agent loads this skill, it gains:

| Capability | Description | |------------|-------------| | Tool signatures | Exact MCP tool names, parameters, return types, and usage guidance | | Workflow patterns | Multi-step chains: scan → CVE lookup → remediation report | | Schema knowledge | Complete data structures for parsing and presenting results | | CPE construction | How to map detected services to NVD vulnerability lookups | | Plugin awareness | 50 scanner plugins (23 CE + 3 Pro + 24 Enterprise) with protocols, ports, capabilities, and SOC 2 + HIPAA §164.312 substrate-evidence dimensions | | Compliance frameworks | SOC 2 (AICPA TSC 2017 — 10 covered + 4 partial controls) AND HIPAA Security Rule §164.312 Technical Safeguards (NEW EE 0.9.0 — 7 covered + 3 partial + 45 OOS; HHS Required/Addressable discipline per control). Multi-framework dual-publish via --compliance soc2,hipaa. Zero BAA required for HIPAA — ePHI never leaves customer infrastructure. | | Security rules | ZDE, SSRF protection, redaction, scan authorization requirements | | Error handling | License gates, SSRF blocks, timeout resolution, CPE format errors | | Decision routing | When to use scan_host vs probe_service vs CLI vs get_vulnerabilities |

Prerequisites

This package provides knowledge about NSAuditor AI. To actually run scans:

Install NSAuditor AI: npm install -g nsauditor-ai
Start MCP server: nsauditor-ai-mcp (or configure in your agent's MCP settings)

Add MCP to your agent:

# Claude Code
claude mcp add nsauditor-ai -- npx nsauditor-ai-mcp

# Claude Desktop (claude_desktop_config.json)
{
  "mcpServers": {
    "nsauditor-ai": {
      "command": "npx",
      "args": ["-y", "nsauditor-ai-mcp"],
      "env": { "NSA_ALLOW_ALL_HOSTS": "1" }
    }
  }
}

Editions

| Edition | Price | Highlights | |---------|-------|-----------| | Community | Free / MIT | 27 plugins (service probes + host/network discovery + intelligence/meta), basic AI, SARIF, CTEM, scan history | | Pro | $49/mo | + CVE matching, verification probes, risk scoring, 3 Pro plugins (040 TLS / 050 TRIBE / 060 DNS) | | Enterprise | $2k+/yr | + 22 cloud-substrate auditor plugins (1020-1200 range; AWS / GCP / Azure SOC 2 evidence-pack), Zero Trust, RFC 3161 timestamps, chain-of-custody attestations, air-gapped deployment |

→ Pricing

nsauditor-ai — The scanner (Community Edition, MIT)
@nsasoft/nsauditor-ai-ee — Pro/Enterprise features
NSAuditor AI Docs — Full documentation

Published

Vulnerabilities

Links

Maintainers

Keywords

Readme