Skip to content
Kitbay
SkillOfficial

diff-scanning-with-aws-security-agent

Apache-2.0Updated on Nov 11, 20263,464GitHub stars

A short skill from AWS's agent toolkit that runs an AWS Security Agent scan limited to the code that changed since a given git reference, for example before a commit, a push or a pull request.

InstallRepository Checked on Nov 13, 2026

What the skill teaches

A short skill from AWS's agent toolkit that runs an AWS Security Agent scan limited to the code that changed since a given git reference, for example before a commit, a push or a pull request. It explains where the workspace keeps its Security Agent settings, how to work out the values a scan needs, the steps to start the diff scan and collect its results, and rules the agent must follow while doing so. It is meant as a fast pre-commit security check rather than a full repository review, and belongs to the aws-agents-for-devsecops plugin, which also contains the skill that sets up Security Agent.

Capabilities

  • Scan only the changed code with AWS Security Agent
  • Run a security check before committing or opening a pull request
  • Collect diff scan findings

Other MCP servers and skills for Amazon Web Services