Security Agent Remediation

AWS Security Agent is a frontier agent that runs on-demand penetration tests and code reviews against a customer's applications and reports verified security risks. This skill takes you from "I have findings somewhere in AWS" to "I'm actively fixing the most important ones," while keeping the sensitive exploit detail out of source control.

The flow has four stages, and they matter in order:

1. Discover which scans exist and how the account is configured (live, read-only).
2. Export the findings to a local gitignored directory.
3. Triage the findings into a prioritized, human-readable plan.
4. Remediate by offering to fix the highest-risk issues.

Why the ordering and the guardrails matter