SkillSpector

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in

Skills#4 · score 88GitHub

What it does

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in

How to install the SkillSpector

For Claude Code or Codex, put the folder that holds SKILL.md into your skills folder (~/.claude/skills/). In the Claude app, zip that folder and upload it under Settings → Capabilities → Skills.

git clone --depth 1 https://github.com/NVIDIA/SkillSpector.git
# put the folder with SKILL.md into your skills folder

Skim a repository or server you do not know before you connect it. Keys and passwords go only to the provider.

Repository facts

Repositorygithub.com/NVIDIA/SkillSpector
GitHub stars21,042
Forks1,847
LicenceApache-2.0
Last updated2026-10-23
Created2026-03-21
Main languagePython
Topicsagent-security agent-skills agentic-ai ai-security claude-code mcp prompt-injection security-scanner
Homepagehttps://docs.nvidia.com/skills/scanning-agent-skills

Why it was picked · #4 · score 88

  • Popularity (41%)77
  • Trust (29%)100
  • Member reviewsNot used this week
  • Search demand (18%)85
  • Search and AI Overview presence (12%)100

Source: GitHub · 21,042 stars · monthly searches 530 · First picked 2026-10-23

Trust checks

  • ✓ Recent activity
  • ✓ Clear description
  • ✓ Licence stated
  • ✓ Not archived

How we pick →

Made it? Add the badge to your README

[![ListeningMind pick](https://daas.listeningmind.ai/badge/skills/x-skill-nvidia-skillspector.svg)](https://daas.listeningmind.ai/en/catalog/skills/x-skill-nvidia-skillspector)

How to buy

People

Top up Lima and pay for what you use (1 Lima = $0.077 whole Lima). For now top-ups go through our team. Ask to top up · m-support@listeningmind.com

Agents

Agents connect the provider's way. Paying in ListeningMind Lima opens once the provider registers and links it.

Reviews ·

    No reviews yet.

    Who can review: Any member. Say in one line what you did with it; it is shown after a check. Only the first letter of your name is shown. A new review replaces your earlier one.

    Questions people ask

    What is the SkillSpector?

    Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in. It is listed on GitHub and ranks #4 (score 88) in ListeningMind.AI's weekly picks.

    How do I install the SkillSpector?

    Clone github.com/NVIDIA/SkillSpector and put the folder that holds SKILL.md into ~/.claude/skills/. In the Claude app, upload that folder as a zip.

    Is it free?

    Yes. It is an open-source repository under Apache-2.0. Outside services the skill calls may charge separately.

    How much does it cost?

    Free (open source). The provider may charge for use on its own terms.

    Can I trust it?

    Checks passed: Recent activity, Clear description, Licence stated, Not archived. Skim a server or repository you have not used before connecting it.