aws agents for devsecops — Agent Skill

aws-agents-for-devsecops — Claude Code plugin

Investigate incidents, review code and execute UAT for release readiness, scan code for vulnerabilities, and run penetration tests with AWS DevOps Agent and AWS Security Agent.

What's inside

| Component | Path | Trigger | |-----------|------|---------| | Skill setup | skills/setup/ | Explicit invocation to setup both agents | | Skill setup-devops-agent | skills/setup-devops-agent/ | Model auto-invokes on first-time setup or credential errors | | Skill setup-security-agent | skills/setup-security-agent/ | Model auto-invokes for Security Agent workspace setup (agent space, role, bucket) | | Skill investigating-incidents-with-aws-devops-agent | skills/investigating-incidents-with-aws-devops-agent/ | Model auto-invokes on incident keywords (5xx, OOM, alarm, sev1, "investigate", "root cause"...) | | Skill chatting-with-aws-devops-agent | skills/chatting-with-aws-devops-agent/ | Model auto-invokes for cost / architecture / topology / knowledge questions | | Skill running-release-tests | skills/running-release-tests/ | Model auto-invokes for release testing (run tests, test profile, UI test, API test, QA, regression) | | Skill analyzing-release-readiness | skills/analyzing-release-readiness/ | Model auto-invokes for pre-merge release readiness reviews (review PR, risk analysis, safe to ship, ready to merge) | | Skill coordinating-multi-space-devops-agent | skills/coordinating-multi-space-devops-agent/ | Model auto-invokes when the user has more than one AgentSpace or asks across accounts | | Skill scanning-with-aws-security-agent | skills/scanning-with-aws-security-agent/ | Model auto-invokes for full code security scans | | Skill diff-scanning-with-aws-security-agent | skills/diff-scanning-with-aws-security-agent/ | Model auto-invokes for diff-only security scans (pre-commit, pre-PR) | | Skill pentesting-with-aws-security-agent | skills/pentesting-with-aws-security-agent/ | Model auto-invokes for penetration testing against live endpoints | | Skill threat-modeling-with-aws-security-agent | skills/threat-modeling-with-aws-security-agent/ | Model auto-invokes for STRIDE threat model reviews on design docs | | Skill remediating-with-aws-security-agent | skills/remediating-with-aws-security-agent/ | Model auto-invokes for fetching, triaging, and fixing security findings | | Command /aws-agents-for-devsecops:setup | commands/setup.md | User and model invokes | | Command /aws-agents-for-devsecops:setup-devops-agent | commands/setup-devops-agent.md | User and model invokes | | Command /aws-agents-for-devsecops:setup-security-agent | commands/setup-security-agent.md | User and model invokes | | Command /aws-agents-for-devsecops:chat | commands/chat.md | User types it explicitly | | Command /aws-agents-for-devsecops:investigate | commands/investigate.md | User types it explicitly | | Command /aws-agents-for-devsecops:release-testing | commands/release-testing.md | User types it explicitly | | Command /aws-agents-for-devsecops:release-readiness | commands/release-readiness.md | User types it explicitly | | Command /aws-agents-for-devsecops:spaces | commands/spaces.md | User types it explicitly | | Command /aws-agents-for-devsecops:cost | commands/cost.md | User types it explicitly | | MCP server aws-devops-agent | .mcp.json (written by setup) | Remote MCP server, Bearer or SigV4 |

Available tools (remote server)

| Category | Tools | |----------|-------| | Chat | chat, create_chat, send_message, list_chats | | Investigation | investigate, create_investigation, get_task, list_tasks, list_journal_records, list_executions | | Recommendations | list_recommendations, get_recommendation, update_recommendation | | Release Testing | create_release_testing_job, cancel_release_testing_job, get_release_ui_testing_report, get_release_api_testing_report | | Release Readiness | create_release_readiness_review, cancel_release_readiness_review, get_release_readiness_report | | Agent Spaces | list_agent_spaces, get_agent_space, create_agent_space, update_agent_space, list_associations | | Access Tokens | create_access_token, get_access_token, list_access_tokens, revoke_access_token, rotate_access_token | | Services | list_services, get_service | | Evaluation | list_goals, start_evaluation |

Prerequisites

AWS SigV4 credentials for your AWS account. For the DevOps agent, you may alternatively use an access token.

Install

From the root directory of this repository:

# From local path:
/plugin marketplace add aws/agent-toolkit-for-aws
/plugin install aws-agents-for-devsecops
/reload-plugins

# Or from Claude's official marketplace:
/plugin install aws-agents-for-devsecops@claude-plugins-official
/reload-plugins

Setup auth:

# General:
/aws-agents-for-devsecops:setup

# AWS DevOps Agent:
/aws-agents-for-devsecops:setup-devops-agent

# AWS Security Agent:
/aws-agents-for-devsecops:setup-security-agent

Verify: