scanning-with-aws-security-agent

Run an AWS Security Agent scan on the workspace — uploads the source to AWS, scans it with the managed Security Agent service, and returns ranked, verified findings with code locations and remediations. Use when the user asks to scan code, find vulnerabilities, run a security scan or review, check security issues, check scan status, show findings, list recent scans, or stop a scan.

Quality

88%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Low

Low-risk findings worth noting

Quality

Content

77%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A highly actionable, well-sequenced skill body with strong validation feedback loops. The main weaknesses are mild redundancy in the summary Rules section and the absence of progressive disclosure — all detail is inline with no reference files.

Suggestions

Drop or trim the final 'Rules' section where each item already appears in its workflow (e.g., pre-scan checks, no-spaces title, formatted findings) to remove redundancy.

Move the detailed findings-report markdown template and Troubleshooting block into a references file (e.g. references/report-template.md) and link to it, keeping SKILL.md as an overview.

Consolidate the placeholder-resolution table and pre-scan checks so resolution is stated once rather than repeated across the table and the numbered steps.

Dimension	Reasoning	Score
Conciseness	Mostly efficient — dense tables, executable commands, terse prose, no explanation of concepts Claude knows — but the trailing 'Rules' section restates invariants already covered in the workflows, and the full markdown report template is somewhat heavy.	2 / 3
Actionability	Fully executable AWS CLI commands with resolved-placeholder tables, concrete JSON scan-record and report templates, and exact polling/error-handling steps — copy-paste ready.	3 / 3
Workflow Clarity	Multi-step workflows are clearly sequenced with explicit validation checkpoints: pre-scan agent-space verification, zip > 2 GB bail-out, ResourceNotFoundException recreate-and-retry, and polling that only reports on status changes or terminal states.	3 / 3
Progressive Disclosure	Well-organized into labeled sections and it points to sibling skills (setup, diff-scan, threat-modeling), but no bundle files exist and everything — the detailed report template, troubleshooting, findings formatting — lives inline in a ~308-line file rather than being split into one-level-deep references.	2 / 3
	Total	10 / 12 Passed

Description

100%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: concrete actions, natural trigger terms, explicit 'Use when' guidance, and a clearly distinct niche. No verbosity or over-claims.

Dimension	Reasoning	Score
Specificity	Lists multiple concrete actions — 'uploads the source to AWS, scans it with the managed Security Agent service, and returns ranked, verified findings with code locations and remediations' — rather than vague language.	3 / 3
Completeness	Explicitly answers both what it does (the upload/scan/return findings sequence) and when to use it via a clear 'Use when the user asks to...' clause.	3 / 3
Trigger Term Quality	Covers natural phrasings a user would actually say: 'scan code, find vulnerabilities, run a security scan or review, check security issues, check scan status, show findings, list recent scans, or stop a scan.'	3 / 3
Distinctiveness Conflict Risk	Scoped to the managed AWS Security Agent full-scan niche with distinct triggers, making it unlikely to fire for unrelated skills.	3 / 3
	Total	12 / 12 Passed

Validation

100%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository: aws/agent-toolkit-for-aws
Path: plugins/aws-agents-for-devsecops/skills/scanning-with-aws-security-agent/SKILL.md
Commit: 222ce56

Reviewed: 3 days ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.