NVIDIA/SkillSpector

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.

About the project

SkillSpector is a security scanner that examines AI agent skills and related files for malicious behavior, vulnerabilities, and other installation risks. It is used to assess skills for agents such as Claude Code, Codex CLI, Gemini CLI, and MCP-based tools before they are installed, while the catalogue includes skills for using the scanner.

21kStars on the repository
2Mods indexed here, across every type
todayLast push, which is what freshness is scored on
Apache-2.0Licence, which decides whether bodies are shown
▶ Your AI Skills Can Hack You — NVIDIA's Free Scanner (SkillSpector) Hyperautomation Labs · about NVIDIA/SkillSpector · on YouTube →

skill-inspector

01

NVIDIA/SkillSpector

Skill Claude CodeCodex ✓ vendor

Review AI agent skills before installation using NVIDIA SkillSpector and source-aware semantic review. Use when asked whether a skill or downloaded skill folder is safe, trustworthy, installable, over-permissioned, or malicious.

not rated 21k +512 changed 4d ago A Socket: passSnyk: warnSkillSpector: pass 47 tokens original Apache-2.0