GH Repository · NVIDIA
SkillSpector
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
- stars
- 17,530
- 30-day movement
- +405135/day
- Related entries
- 61
- Connections
- 1
pythonmakedockeragent-securityagent-skillsprompt-injectionagentic-aisecurity-scannerclaude-codenodemcpsecurity-toolssecurity-workflowsupply-chain-securityPythonpython/uvai-securityskill-pack
SkillSpector is a security scanner from NVIDIA for AI agent skills. It checks Claude Code, Codex, and MCP skills for vulnerabilities, malicious patterns, prompt injection, data exfiltration, and supply-chain risks before installation.
You want to vet third-party agent skills for security risks before running them on your machine.
Use it to
- Scan skills before installing them
- Detect prompt injection patterns
- Check for data exfiltration risks
- Assess supply-chain risks in agent skills
- Review MCP skills for malicious patterns
For Developers installing or publishing AI agent skills
- Role
- skill-pack
- Language
- Python
- Licence
- Apache-2.0
- Forks
- 1,499
- Open issues
- 54
- Last push
- 2026-09-17
- Latest release
- v2.5.0 · 2026-07-27
- Skills shipped
- 1
topicsagent-securityprompt-injectionsupply-chain-securitymcpclaude-codesecurity-scanner