diff-scanning-with-aws-security-agent

Scan git diffs against a reference for security issues.

Updated Jun 18, 2026
One-click install
npx skills add https://github.com/AndreKurait/claude-marketplace-test --skill diff-scanning-with-aws-security-agent
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: diff-scanning-with-aws-security-agent
Source: https://github.com/AndreKurait/claude-marketplace-test/tree/main/plugins/aws-agents-for-devsecops/skills/diff-scanning-with-aws-security-agent
Command: npx skills add https://github.com/AndreKurait/claude-marketplace-test --skill diff-scanning-with-aws-security-agent

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Quickly identify security issues only in code changes by scanning diffs against a git reference, saving time compared to full scans.

Core Features & Use Cases

  • Diff-focused security checks: scan only changed files since a specified git ref to surface new vulnerabilities.
  • Pre-commit and PR readiness: run quick security validation before committing or opening pull requests.
  • Automated CodeReview integration: create and manage per-workspace code reviews for diff findings using AWS Security Agent.

Quick Start

Trigger a diff scan by choosing a base git ref (default HEAD) to scan only the changed code.

Frequently Asked Questions about diff-scanning-with-aws-security-agent

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan only changed files for security issues before a commit?

You can run a diff scan by specifying a base git reference, defaulting to HEAD, to scan only the changed code. This workflow automates workspace resolution, diff generation, and AWS Security Agent integration for quick security validation.

What is the best way to integrate security checks into pull request workflows?

Diff scans support pull request readiness by validating only changed files for new vulnerabilities before a PR is opened. The workflow automates workspace resolution, diff generation, and AWS Security Agent integration to manage per-workspace code reviews.

Can I use AWS Security Agent to scan git diffs instead of the full codebase?

Using AWS Security Agent to scan git diffs compares changed files against a base git ref to surface new vulnerabilities. This diff-focused approach automates workspace resolution and scan monitoring, avoiding the overhead of full codebase scans.

Does diff scanning with AWS Security Agent require any specific dependencies?

No external dependencies are required to use diff scanning with AWS Security Agent. The workflow operates natively to automate workspace resolution, diff generation against a git ref, and scan monitoring to identify security issues in code changes.