SkillSpector

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.

Open SourceLive

0 0

Install

uv tool install git+https://github.com/NVIDIA/skillspector.git

uv tool install 'skillspector[mcp] @ git+https://github.com/NVIDIA/skillspector.git'

git clone https://github.com/NVIDIA/skillspector.git

Copied from the project's README. Read what it does before you run it.

README scanSafe

Nothing risky found in the commands its README asks you to run.

Needs an API key or tokenANTHROPIC_API_KEY=sk-ant-...

We scan the README only, not the code. A clean result is not proof of safety. How we scan

Alternatives to SkillSpector

Listings of the same kind that share the most topics, most-starred first.

Claude BugHunter

A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identi

5.8k

View on GitHub

Repository

Stars: 26,037
Forks: 2,313
Last updated: Nov 14, 2026
License: Apache-2.0
Language: Python
Created: Mar 21, 2026
Open issues: 149
Quality score: S 89/100

NVIDIA/SkillSpector

Read from GitHub daily.

See alternatives

Pricing

Open Source

Made by

No owner listed.