{"id":"cmuxk5ck51q8had077t5volyv","slug":"scanning-with-aws-security-agent","publicId":"ed5b37b8-0177-4f52-a772-f96f005df0bd","name":"scanning-with-aws-security-agent","description":"Run an AWS Security Agent scan on the workspace — uploads the source to AWS, scans it with the managed Security Agent service, and returns ranked, verified findings with code locations and remediations. Use when the user asks to scan code, find vulnerabilities, run a security scan or review, check security issues, check scan status, show findings, list recent scans, or stop a scan.","version":"","author":"aws","license":"Apache-2.0","compatibility":"","status":"completed","overallGrade":"A","scannerVersion":11,"fileCount":1,"hasSkillMd":true,"hasScripts":false,"hasReferences":false,"hasEvals":false,"hasAssets":false,"sourceType":"github","sourceUrl":"https://github.com/aws/agent-toolkit-for-aws/tree/main/plugins/aws-agents-for-devsecops/skills/scanning-with-aws-security-agent","createdAt":"2026-10-07T03:38:25.267Z","completedAt":"2026-10-07T03:38:25.266Z","visibility":"public","publishedAt":"2026-08-25T20:14:45.892Z","category":"","frameworks":[],"badgeStatus":"vettd","downloadCount":0,"verdictRationale":{"summary":"Skill failed: 0 hard fails in skill checks.","verdict":"fail","scanners":[{"source":"vettd","weight":1,"verdict":null},{"source":"cisco","weight":0.8,"verdict":"pass"}],"consensus":"pending","warnTriggers":[],"policyVersion":"consensus-v1","hardFailTriggers":[]},"verdictPolicyVersion":"consensus-v1","skillId":"cmt93t0fv2z8cad09y5z6w311","findings":[{"id":"cmuxk5ck51q8iad07sl91flrn","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"592f7ac7731768f0fd0bba83f30850f9","filepath":"SKILL.md"}],"scannerRuns":[{"source":"cisco","status":"success","verdict":null,"grade":"A","findingCount":1,"criticalCount":0,"highCount":0},{"source":"vettd","status":"success","verdict":null,"grade":"A","findingCount":0,"criticalCount":0,"highCount":0}],"user":{"name":"Justin Pacella","image":"https://avatars.githubusercontent.com/u/97124458?v=4"},"repository":{"owner":"aws","name":"agent-toolkit-for-aws"},"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:28:06.986Z","lastVerifiedAt":"2026-10-22T00:28:06.986Z","lastChangeDetectedAt":"2026-10-09T08:10:29.185Z","scannedHash":"00432e16d87592f15546e15943e6ad81204f0c98","latestUpstreamHash":"00432e16d87592f15546e15943e6ad81204f0c98","nextCheckDueAt":"2026-10-22T22:33:02.162Z"},"signalCategories":[{"category":"safety","label":"Safety","form":"graded","verdict":null,"rows":[]},{"category":"reliability","label":"Reliability & Quality","form":"graded","verdict":null,"rows":[]},{"category":"performance","label":"Performance","form":"measured","verdict":{"form":"measured","magnitudes":[{"ruleId":"performance/static-context-tokens","label":"Static context tokens","value":2883,"unit":null,"method":"tiktoken/cl100k_base/skill-md-body"}]},"rows":[{"origin":"signal","id":"cmuxk5e9g1qmrad07kq88bm03","subjectType":"skill_audit","subjectId":"cmuxk5ck51q8had077t5volyv","relatedType":"","relatedId":"","dataCategory":"performance","sourceClass":"scan","source":"vettd","ruleId":"performance/static-context-tokens","severity":null,"label":"Static context tokens","detail":null,"valueNum":2883,"valueText":null,"unit":null,"method":"tiktoken/cl100k_base/skill-md-body","derivation":null,"confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T03:38:11.000Z","payload":null},{"origin":"signal","id":"cmuxk5mo01sl0ad07oshkn9j4","subjectType":"skill_audit","subjectId":"cmuxk5ck51q8had077t5volyv","relatedType":"","relatedId":"","dataCategory":"performance","sourceClass":"scan","source":"vettd","ruleId":"performance/progressive-disclosure","severity":null,"label":"Progressive disclosure","detail":null,"valueNum":null,"valueText":"absent","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T03:38:11.000Z","payload":null}]},{"category":"cost","label":"Cost","form":"measured","verdict":null,"rows":[]},{"category":"compatibility","label":"Compatibility","form":"unjudged","verdict":{"form":"unjudged"},"rows":[{"origin":"signal","id":"cmuxk5euy1qs1ad077344vbn7","subjectType":"skill_audit","subjectId":"cmuxk5ck51q8had077t5volyv","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-environment-assumptions","severity":null,"label":"Declared environment assumptions","detail":null,"valueNum":null,"valueText":"","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T03:38:11.000Z","payload":null},{"origin":"signal","id":"cmuxk5ieu1rlhad07m73e4f1u","subjectType":"skill_audit","subjectId":"cmuxk5ck51q8had077t5volyv","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-name","severity":null,"label":"Declared skill name","detail":null,"valueNum":null,"valueText":"scanning-with-aws-security-agent","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T03:38:11.000Z","payload":null}]},{"category":"sentiment","label":"Popularity","form":"unjudged","verdict":null,"rows":[]},{"category":"characteristics","label":"Characteristics","form":"unjudged","verdict":null,"rows":[]}],"signalCount":24,"publisherSupplied":["name","description","author","version","license"]}