The request names "esaa-security-audit", which is not one of the listed products, so there is no named product to answer about. Among the candidates, the ones that actually run security audits are the Amazon AWS Security Agent scanning skills 10, the Trail of Bits audit tooling such as audit-prep-assistant and zeroize-audit 7, and the Docker ASH scan actions 3. Please clarify the platform or language you need the audit for.
A question back: Which platform or language is the codebase in (e.g. Python, JavaScript, AWS-hosted, container-based)?
- 1
AWS Security Agentamazon.comverified and signed
Runs AWS Security Agent scans on a workspace, including diff scans of changed code since a git ref and full scans via the scanning and diff-scanning skills 10.
official:skill · diff-scanning-with-aws-security-agentskill · pentesting-with-aws-security-agentskill · remediating-with-aws-security-agentskill · scanning-with-aws-security-agent
for agents: remediating-with-aws-security-agent · scanning-with-aws-security-agent · ListFindings
- 2
- 3
Docker Automated Security Helperdocker.comfound in code, not yet checked
Runs security scans through run_ash_scan and run_check actions, with the automated-security-helper repository for container and code checks 3.
official:MCP server · @aws/run-mcp-servers-with-aws-lambdaSDK · dockerlibrary · aws-smithy-observabilityCLI · dockerrepository · automated-security-helper+190 community tools built for it
for agents: run_ash_scan · run_ash_workspace_scan · run_check
Sources
- 3Docker | Secure Sandboxes for AI Agentsdocker.com · read 2026-10-29
- 7Trail of Bits: Security Research, Audits, and Toolstrailofbits.com · read 2026-10-29
- 10diff-scanning-with-aws-security-agent — aws/agent-toolkit-for-awsskills.sh · read 2026-10-29
For agents: the 10 actions behind this answer
mcp-security-audit · mcp-security-audit verified and signed
Audit MCP (Model Context Protocol) server configurations for security issues. Use this skill when: - Reviewing .mcp.json files for security risks - Checking MCP server args for hardcoded secrets or shell injection patterns - Validating that MCP package-runner dependencies use exact reviewed versions
security-audit · security-audit verified and signed
Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons. Use for security questions, focused reviews, vulnerability research, security audits, or pen tests. Run the complete workflow only for explicit codebase audit or pen-test requests, full/compr
run_ash_scan · automated-security-helper found in code, not yet checked
Start a security scan and return immediately.
pypa/gh-action-pip-audit · gh-action-pip-audit verified and signed
Use pip-audit to scan Python dependencies for known vulnerabilities
workos_audit_query · workos-audit-harness found in code, not yet checked
Export filtered WorkOS audit logs, parse the CSV, and return summaries plus sample rows for answering questions about audit activity.
· Prompttools website read, tools not yet checked
Security-Audit für KI-Agenten & MCP-Server: deterministische Prüfung gegen 236 Bedrohungsmuster, mit dokumentiertem Befundbericht zur EU-AI-Act-Vorbereitung. Ab 99 EUR, Ergebnis in 48 Stunden.
audit-prep-assistant · audit-prep-assistant verified and signed
Prepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis tools, increases test coverage, removes dead code, ensures accessibility, and generates documentation (flowcharts, user stories, inline comments). Use when preparing your own codebase
projectdiscovery · ProjectDiscovery Documentation verified and signed
Use when discovering assets, running vulnerability scans, creating
ask-ai · Perplexity AI (Activepieces) verified and signed
Ask AI — Ask a question and get an answer sourced from the live web.
remediating-with-aws-security-agent · remediating-with-aws-security-agent verified and signed
Pull AWS Security Agent findings (penetration tests and code reviews) and drive remediation. Use this whenever the user mentions Security Agent, security findings, pentest or penetration test results, code review findings, vulnerabilities found in their AWS account, "what did the security scan find"
Labels are the instruments' verdict and are never changed by ranking. Agents and robots get this same answer as JSON at /api/v1/find?q=…&answer=1 and through the MCP server.