Nsauditor Ai Agent Skill

NSAuditor AI Agent Skill

**Give any AI coding agent instant fluency with NSAuditor AI.**

[](https://www.npmjs.com/package/nsauditor-ai-agent-skill) [](LICENSE)

An installable knowledge package that teaches AI coding agents how to use NSAuditor AI's MCP tools, understand its data schemas, and orchestrate multi-step security audit workflows — without requiring manual context every conversation.

Works with **Claude Code**, **Claude Desktop**, **Cursor**, **Windsurf**, **VS Code Copilot**, and any MCP-aware agent.

Current release

**0.2.46** — paired with **Enterprise 0.41.0 / Community 0.2.48**. New in this release's teaching: the 29th Enterprise plugin, `1230 AWS DocumentDB Auditor` (docdb-engine ownership on the shared RDS control plane — encryption + custody, `tls`, audit logging + export, retention, deletion protection, replica/AZ topology, snapshot sharing), the RDS auditor's engine filter with its standing disclosure (a Neptune estate is explicitly unaudited), and the deferred status of DocumentDB Elastic clusters. Prior: **0.2.45** — paired with **Enterprise 0.40.3 / Community 0.2.47**. New in this release's teaching: on the **opt-in** RFC 3161 path (`NSAUDITOR_TSA_URL`; no default authority), a granted token that attests a DIFFERENT digest than the request carried is now refused (`tsa_imprint_mismatch`); the auditor instruction printed on every timestamped report is corrected to one that actually runs; and a BER-encoded token is no longer refused when openssl can read it.

**0.2.44** — paired with **Enterprise 0.40.2 / Community 0.2.46**. New in this release's teaching: a TSA rejection is refused instead of being written as a signed sidecar (five named refusal codes; a missing `.tsr` beside a `.sha256` means refused, not failed), the TSA policy-OID option works on OpenSSL ≥ 3.0 hosts, and parenthesised `(Dim N)` internal co