The Agent Skills Directory

[Official Resource References]: The skill incorporates references to authoritative security guidelines hosted on official AWS GitHub repositories. These links provide a secure foundation for the security rules applied during the review process.
[Scope-Limited Instructions]: The review process is explicitly constrained to evaluate only new security exposures introduced by specific code changes. This design prevents the inclusion of out-of-scope data and ensures the analysis remains focused on the intended PR context.
[Absence of Executable Content]: The skill is composed entirely of markdown instructions and static reference files. It does not include scripts, dynamic code execution patterns, or external package installations, which minimizes the risk of unauthorized runtime operations.
[Structured Methodology]: The skill implements a clear step-by-step process for identifying, validating, and rating security findings, which promotes consistent and predictable behavior without bypassing established safety boundaries.

cdk-security-review