chore(doc): update agents.md and security scanners workflow trigger (#16)

* chore(github): disable security scanners on pr as done in build already

* chore(doc): update agents md

* chore(doc): add boundaries

* chore(github): update scanner

* Refactor introduction in AGENTS.md

Removed elevator pitch for leadership and streamlined the introduction to focus on the plugin marketplace concept.

Signed-off-by: Alain Krok <alkrok@amazon.com>

---------

Signed-off-by: Alain Krok <alkrok@amazon.com>
Co-authored-by: Laith Al-Saadoon <9553966+theagenticguy@users.noreply.github.com>

Author: krokoko

.github/workflows/security-scanners.yml

@@ -3,9 +3,11 @@ on:
   schedule:
     # Daily at 15:12 UTC (random time to avoid GitHub Actions load spikes)
     - cron: '12 15 * * *'
+  workflow_dispatch:
   push:
+    branches: [main]
   pull_request:
-  workflow_dispatch:
+    branches: [main]
 permissions:
   actions: none
   attestations: none

AGENTS.md

@@ -2,9 +2,7 @@
 
 ## TL;DR Pitch
 
-AI coding assistants (Claude Code, Cursor, Windsurf) are becoming the primary interface developers use. These tools support **plugins** - bundles of skills, MCP servers, and agent configurations that extend capabilities. Cursor is launching a curated plugin marketplace. AWS should launch our own plugin marketplace to meet developers where they work. This repo is the MVP: `awslabs/agent-plugins` marketplace with a single plugin (`deploy-on-aws`) that lets any developer say "deploy this to AWS" and get architecture recommendations, cost estimates, and working IaC.
-
-**Elevator pitch for leadership:** Plugin marketplaces are the new app stores for AI-assisted development. Cursor is launching theirs. AWS needs presence in this ecosystem - not just as a cloud provider, but as a first-class citizen in developer tooling. This repo delivers that with a single high-value plugin: "deploy to AWS" in natural language.
+This repository supports **plugins** - bundles of skills, MCP servers, and agent configurations that extend capabilities. This repo is the MVP: `awslabs/agent-plugins` marketplace with a single plugin (`deploy-on-aws`) that lets any developer say "deploy this to AWS" and get architecture recommendations, cost estimates, and working IaC.
 
 ## Core Concepts
 
@@ -24,20 +22,37 @@ Skills are **NOT** slash commands. The agent determines when to use a skill base
 ## Directory Structure
 
 ```
-awslabs-agent-plugins/
+agent-plugins/
 ├── .claude-plugin/
 │   └── marketplace.json          # Marketplace registry
+├── .github/
+│   ├── workflows/                # CI (build, lint, security, etc.)
+│   ├── ISSUE_TEMPLATE/
+│   └── ...
 ├── plugins/
 │   └── deploy-on-aws/
 │       ├── .claude-plugin/
 │       │   └── plugin.json       # Plugin manifest
 │       ├── .mcp.json             # MCP server definitions
 │       └── skills/
 │           └── deploy/
-│               ├── SKILL.md      # Main skill (auto-triggers)
+│               ├── SKILL.md     # Main skill (auto-triggers)
 │               └── references/
 │                   ├── defaults.md
-│                   └── cost-estimation.md
+│                   ├── cost-estimation.md
+│                   └── security.md
+├── schemas/                      # JSON schemas for manifests
+│   ├── marketplace.schema.json
+│   ├── plugin.schema.json
+│   ├── mcp.schema.json
+│   └── skill-frontmatter.schema.json
+├── tools/                        # Lint/validation scripts
+│   ├── validate-cross-refs.cjs
+│   └── ...
+├── mise.toml                     # Tool versions and tasks
+├── dprint.json
+├── .markdownlint-cli2.yaml
+├── .pre-commit-config.yaml
 └── README.md
 ```
 
@@ -75,7 +90,30 @@ See `.claude/docs/` for Claude Code plugin system reference:
 - `plugin_reference.md` - Complete technical reference
 - `skills_docs.md` - Skill authoring guide
 
-## Commands
+## Development commands (mise)
+
+The project uses [mise](https://mise.jdx.dev) for tool versions and tasks. Ensure mise is installed, then from the repo root:
+
+```bash
+# Install tools (Node, markdownlint, pre-commit, security scanners, etc.)
+mise install
+
+# Run common tasks
+mise run pre-commit    # Pre-commit hooks on all files
+mise run fmt           # Format with dprint
+mise run fmt:check     # Check formatting (CI)
+mise run lint:md       # Lint Markdown (incl. SKILL.md)
+mise run lint:md:fix   # Lint Markdown with auto-fix
+mise run lint:manifests   # Validate JSON manifests (marketplace, plugin, MCP)
+mise run lint:cross-refs  # Validate cross-references between manifests
+mise run lint          # All linters
+mise run security      # All security scans (Bandit, SemGrep, Gitleaks, Checkov, Grype)
+mise run build         # Full build: lint + fmt:check + security
+```
+
+See `mise.toml` for the full task list and tool versions.
+
+## Plugin commands (Claude)
 
 ```bash
 # Add marketplace
@@ -87,3 +125,10 @@ See `.claude/docs/` for Claude Code plugin system reference:
 # Test locally
 claude --plugin-dir ./plugins/deploy-on-aws
 ```
+
+## Boundaries
+
+- ALWAYS Use mise commands to interact with the codebase. If a command is not available, add it.
+- NEVER add new dependencies without asking first.
+- ALWAYS run a full build when done with a task, this is to ensure all required files are generated before commit.
+- ALWAYS Ask first before modifying existing files in a major way.