skillspector
Scans AI agent skills for Claude Code, Codex, and MCP for vulnerabilities and malicious patterns before you install them, after finding that over a quarter of a large skill sample had real security issues.
View nvidia/skillspector on GitHub- GitHub stars
- 25,710
- Forks
- —
- Language
- Python
Project details
- Repository
- nvidia/skillspector
- Licence
- Apache-2.0
- Primary language
- Python
- Catalog status
- Available
- Catalog check
- 2026-11-13
Repository description
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Explore by topic
More tools in Security & privacy
- ai-infra-guard
tencent · Apache-2.0
Tencent built an open-source security scanner that probes AI agents, agent skills, and LLMs for jailbreaks and other vulnerabilities before attackers do.
- geiger
atomburstofficial · MIT
A single command that scans your machine and tells you, in plain language, every AI agent, plugin, and MCP server installed and what each one can touch.
- rea
morluto · MIT
Lets your AI coding agent reverse-engineer a feature you like in any app, explain exactly how it works with evidence, and rebuild a version of it for your own product,…
- openqodex
openqodex · Apache-2.0
A free CLI that runs security/lint scanners on just your changed lines, then has a separate Claude Code or Codex process review every finding against the real diff…