aws-agents-for-devsecops

Partner, reviewed

Investigate incidents, review code and execute UAT for release readiness, scan code for vulnerabilities, and run penetration tests with AWS DevOps Agent and AWS Security Agent.

Plugin · by aws · runs in Claude Code, Cowork, claude.ai · 13 skills, 1 MCP server, 9 commands · listed 2026-06-18

Claude Code

claude plugin install aws-agents-for-devsecops

Source

Skills (13)

Skill analyzing-release-readiness

Trigger a pre-merge release readiness review on a GitHub PR, GitLab MR, or local branch. Use when the user wants to analyze code changes for risk, correctness, and potential rollback issues before…

Any agent
```
npx skills add aws/agent-toolkit-for-aws --skill analyzing-release-readiness
```
Skill chatting-with-aws-devops-agent

Have a fast, conversational analysis with the AWS DevOps Agent. Use for cost optimization, architecture review, topology mapping, knowledge / runbook discovery, security audits, dependency…

Any agent
```
npx skills add aws/agent-toolkit-for-aws --skill chatting-with-aws-devops-agent
```
Skill coordinating-multi-space-devops-agent

Coordinate the AWS DevOps Agent across multiple AgentSpaces from one Claude Code session — route questions to the right space (prod vs staging vs knowledge), query several spaces in parallel and…

Any agent
```
npx skills add aws/agent-toolkit-for-aws --skill coordinating-multi-space-devops-agent
```
Skill diff-scanning-with-aws-security-agent

Run a fast AWS Security Agent diff scan on only the changed code since a git ref. Use when the user asks to scan changes, run a diff scan, check what changed for security issues, scan before…

Any agent
```
npx skills add aws/agent-toolkit-for-aws --skill diff-scanning-with-aws-security-agent
```
Skill investigating-incidents-with-aws-devops-agent

Run a deep root-cause investigation on the AWS DevOps Agent. Use when the user describes an incident, alarm, outage, or unexplained behavior — keywords like "5xx", "503", "OOM", "latency spike"…

Any agent
```
npx skills add aws/agent-toolkit-for-aws --skill investigating-incidents-with-aws-devops-agent
```
Skill pentesting-with-aws-security-agent

Run an AWS Security Agent penetration test against a live web application — registers and verifies the target domain, exercises the supplied endpoints with the managed Security Agent service, and…

Any agent
```
npx skills add aws/agent-toolkit-for-aws --skill pentesting-with-aws-security-agent
```
Skill remediating-with-aws-security-agent

Pull AWS Security Agent findings (penetration tests and code reviews) and drive remediation. Use this whenever the user mentions Security Agent, security findings, pentest or penetration test…

Any agent
```
npx skills add aws/agent-toolkit-for-aws --skill remediating-with-aws-security-agent
```
Skill running-release-tests

Run automated release testing (UI or API) via the AWS DevOps Agent using a pre-configured test profile. Use when the user wants to validate multi-step workflows, verify features, check for…

Any agent
```
npx skills add aws/agent-toolkit-for-aws --skill running-release-tests
```
Skill scanning-with-aws-security-agent

Run an AWS Security Agent scan on the workspace — uploads the source to AWS, scans it with the managed Security Agent service, and returns ranked, verified findings with code locations and…

Any agent
```
npx skills add aws/agent-toolkit-for-aws --skill scanning-with-aws-security-agent
```
Skill setup

Set up the AWS DevOps Agent and AWS Security Agent connections. Use when the user says "set up", "configure", "connect", or when MCP tools are missing.

Any agent
```
npx skills add aws/agent-toolkit-for-aws --skill setup
```
Skill setup-devops-agent

Setup and diagnostics for the AWS DevOps Agent MCP connection. Triggers when aws-devops-agent is missing from .mcp.json, when the connection is broken, or when the user says "set up devops agent" /…

Any agent
```
npx skills add aws/agent-toolkit-for-aws --skill setup-devops-agent
```
Skill setup-security-agent

Configure AWS Security Agent for the current workspace — provision or reuse an agent space, IAM service role, and S3 bucket.

Any agent
```
npx skills add aws/agent-toolkit-for-aws --skill setup-security-agent
```
Skill threat-modeling-with-aws-security-agent

Run an AWS Security Agent threat model review on spec/design documents. Use when the user asks to review a spec for security, run a threat model, check if a design introduces security risks, review…

Any agent
```
npx skills add aws/agent-toolkit-for-aws --skill threat-modeling-with-aws-security-agent
```

Commands (9)

Command chat

Open a chat session with the AWS DevOps Agent and ask a question
Command cost

Ask the AWS DevOps Agent for cost optimization opportunities, scoped to your local IaC
Command investigate

Start a deep root-cause investigation on the AWS DevOps Agent and stream progress
Command release-readiness

Trigger a pre-merge release readiness review on a GitHub PR, GitLab MR, or local branch
Command release-testing

Run automated UAT tests (UI or API) using a test profile on the AWS DevOps Agent
Command setup

Set up both AWS DevOps Agent and AWS Security Agent connections
Command setup-devops-agent

Set up the AWS DevOps Agent MCP connection
Command setup-security-agent

Set up the AWS Security Agent workspace
Command spaces

List configured AgentSpaces and summarize each one's accounts and capabilities

From Anthropic's public plugin directory, read on 2026-10-15. Find a skill by task.