nsauditor-ailisted
Use this skill whenever the user wants to perform network security scanning, auditing, vulnerability assessment, or host reconnaissance using NSAuditor AI. Triggers include: any mention of 'scan', 'audit', 'vulnerability', 'CVE', 'network security', 'port scan', 'service detection', 'OS fingerprinting', 'security assessment', 'penetration test', 'probe', 'MITRE ATT&CK', 'CPE', 'NVD', 'TLS audit', 'cipher check', 'banner grab', 'SNMP', 'NetBIOS', 'SMB', 'DNS security', 'DKIM', 'SPF', 'DMARC', 'DNSSEC', 'certificate audit', 'SARIF', 'CTEM', 'continuous monitoring', 'host discovery', 'mDNS', 'UPnP', 'SSDP', 'ARP scan', 'subnet scan', or references to NSAuditor, nsauditor-ai, or the nsauditor MCP server. Also triggers when the user asks to check if a host is up, enumerate services, detect TLS versions, find open ports, look up CVEs for a software version, audit DNS records, check certificate expiry, or perform continuous security monitoring. Use this skill even if the user doesn't explicitly say "NSAuditor" — if
opencue/cue · ★ 2 · AI & Automation · score 75
Install: claude install-skill opencue/cue
# NSAuditor AI — Agent Skill
> **Version:** 0.1.10 · **Source:** [github.com/nsasoft/nsauditor-ai](https://github.com/nsasoft/nsauditor-ai) · **npm:** `nsauditor-ai` · **License:** MIT (CE)
NSAuditor AI is a modular, AI-assisted network security audit platform with 27+ scanner
plugins, CVE matching, MITRE ATT&CK mapping, and Zero Data Exfiltration by design. This
skill teaches you how to operate it via MCP tools and CLI.
---
## MCP Tools Reference
NSAuditor AI exposes tools via Model Context Protocol (stdio transport). Available tools
depend on the license tier (Community / Pro / Enterprise).
### Community Edition Tools (always available)
#### `scan_host`
Run a full plugin scan against a target host. Executes ALL enabled plugins in priority
order (discovery → service probes → OS detection → result fusion).
| Parameter | Type | Required | Default | Description |
|-----------|------|----------|---------|-------------|
| `host` | string | ✅ | — | Target hostname or IP address |
| `timeout` | number | ❌ | 30000 | Per-plugin timeout in ms |
**Returns:** `{ summary, host, services[], findings[] }` — see `references/schemas.md`
**Example:**
```json
{ "host": "192.168.1.1", "timeout": 10000 }
```
**Important:**
- For RFC 1918 / private IPs, the MCP server must have `NSA_ALLOW_ALL_HOSTS=1` set.
- The server blocks loopback (127.x, ::1), link-local (169.254.x, fe80:), and cloud
metadata endpoints (169.254.169.254) — this is SSRF protection, not a bug.
- Plugins with unmet