AWS Security Agent — Setup This skill handles ONE thing: making sure the workspace has a working agent space, IAM service role, and S3 bucket linked together. Scans and pentests live in separate skills and assume this is done. --- Local state convention All Security Agent skills share workspace-local state at : - — . Account ID, role ARN, and bucket name are derived by convention. The map lets scans reuse the same CodeReview for a workspace. - — array of (keep last 50) - — same shape, for pentest jobs - — contents so this directory stays untracked - — written by the scan skill after each scan…