Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
About the project
SkillSpector is a security scanner that examines AI agent skills and related files for malicious behavior, vulnerabilities, and other installation risks. It is used to assess skills for agents such as Claude Code, Codex CLI, Gemini CLI, and MCP-based tools before they are installed, while the catalogue includes skills for using the scanner.
Review AI agent skills before installation using NVIDIA SkillSpector and source-aware semantic review. Use when asked whether a skill or downloaded skill folder is safe, trustworthy, installable, over-permissioned, or malicious.