NVIDIA/SkillSpector

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.

About the project

SkillSpector is a security scanner that examines AI agent skills and related files for malicious behavior, vulnerabilities, and other installation risks. It is used to assess skills for agents such as Claude Code, Codex CLI, Gemini CLI, and MCP-based tools before they are installed, while the catalogue includes skills for using the scanner.

20kStars on the repository
2Mods indexed here, across every type
yesterdayLast push, which is what freshness is scored on
Apache-2.0Licence, which decides whether bodies are shown
▶ Your AI Skills Can Hack You — NVIDIA's Free Scanner (SkillSpector) Hyperautomation Labs · about NVIDIA/SkillSpector · on YouTube →

skillspector

01

NVIDIA/SkillSpector

Command Claude CodeOpenCode ✓ vendor

Scan an AI agent skill for security risks with SkillSpector (static analysis by default); use when vetting a skill before install or auditing one in use.

not rated 20k +491 yesterday A 32 tokens original Apache-2.0