Run a fast AWS Security Agent diff scan on only the changed code since a git ref. Use when the user asks to scan changes, run a diff scan, check what changed for security issues, scan before committing, scan before PR, or any pre-commit/pre-push security check.
Install
npx skills add aws/agent-toolkit-for-aws --skill diff-scanning-with-aws-security-agentnpx skills add aws/agent-toolkit-for-aws --skill diff-scanning-with-aws-security-agent -a claude-code -gnpx skills add aws/agent-toolkit-for-aws --skill diff-scanning-with-aws-security-agent -a codex -ggemini skills install https://github.com/aws/agent-toolkit-for-aws.git --path plugins/aws-agents-for-devsecops/skills/diff-scanning-with-aws-security-agentgh skill install aws/agent-toolkit-for-aws diff-scanning-with-aws-security-agentgit clone --depth 1 https://github.com/aws/agent-toolkit-for-aws /tmp/aws__agent-toolkit-for-aws
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/aws__agent-toolkit-for-aws/plugins/aws-agents-for-devsecops/skills/diff-scanning-with-aws-security-agent ~/.claude/skills/diff-scanning-with-aws-security-agent # Claude Code
cp -R /tmp/aws__agent-toolkit-for-aws/plugins/aws-agents-for-devsecops/skills/diff-scanning-with-aws-security-agent ~/.agents/skills/diff-scanning-with-aws-security-agent # Codex, Cursor, Gemini CLI, Copilot, OpenCode