SkillSpector
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in
What it does
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in
How to install the SkillSpector
For Claude Code or Codex, put the folder that holds SKILL.md into your skills folder (~/.claude/skills/). In the Claude app, zip that folder and upload it under Settings → Capabilities → Skills.
git clone --depth 1 https://github.com/NVIDIA/SkillSpector.git
# put the folder with SKILL.md into your skills folderSkim a repository or server you do not know before you connect it. Keys and passwords go only to the provider.
Repository facts
| Repository | github.com/NVIDIA/SkillSpector |
|---|---|
| GitHub stars | 21,042 |
| Forks | 1,847 |
| Licence | Apache-2.0 |
| Last updated | 2026-10-23 |
| Created | 2026-03-21 |
| Main language | Python |
| Topics | agent-security agent-skills agentic-ai ai-security claude-code mcp prompt-injection security-scanner |
| Homepage | https://docs.nvidia.com/skills/scanning-agent-skills |
Why it was picked · #4 · score 88
- Popularity (41%)77
- Trust (29%)100
- Member reviewsNot used this week
- Search demand (18%)85
- Search and AI Overview presence (12%)100
Source: GitHub · 21,042 stars · monthly searches 530 · First picked 2026-10-23
Trust checks
- ✓ Recent activity
- ✓ Clear description
- ✓ Licence stated
- ✓ Not archived
Made it? Add the badge to your README
[](https://daas.listeningmind.ai/en/catalog/skills/x-skill-nvidia-skillspector)How to buy
Top up Lima and pay for what you use (1 Lima = $0.077 whole Lima). For now top-ups go through our team. Ask to top up · m-support@listeningmind.com
Agents connect the provider's way. Paying in ListeningMind Lima opens once the provider registers and links it.
Reviews ·
No reviews yet.
Questions people ask
What is the SkillSpector?
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in. It is listed on GitHub and ranks #4 (score 88) in ListeningMind.AI's weekly picks.
How do I install the SkillSpector?
Clone github.com/NVIDIA/SkillSpector and put the folder that holds SKILL.md into ~/.claude/skills/. In the Claude app, upload that folder as a zip.
Is it free?
Yes. It is an open-source repository under Apache-2.0. Outside services the skill calls may charge separately.
How much does it cost?
Free (open source). The provider may charge for use on its own terms.
Can I trust it?
Checks passed: Recent activity, Clear description, Licence stated, Not archived. Skim a server or repository you have not used before connecting it.