NVIDIA / SkillSpector
git clone https://github.com/NVIDIA/SkillSpector.git
v2.13.0 · 11d ago
🔥 on GitHub Trending today
Static and optional LLM-assisted security scanner that checks AI agent skills for prompt injection, exfiltration, and supply-chain risks before install.
Why you might care
Vet Claude Code, Codex, Gemini CLI, and MCP skills before installing them, with 71 patterns across 17 categories, a 0-100 risk score, and Terminal, JSON, Markdown, and SARIF output. Baseline suppression lets repeat scans surface only new findings.
+353
stars, 24h · #92
+2.1k
stars, 7 days · #113
+4.4k
stars, 30 days · #222
23k
★ total · +10% this week
2.0k
forks · 187 open issues
Star history (as recorded here)
LanguagePython
LicenseApache-2.0
Created2026-03-21 (7mo ago)
Last pushtoday
Watchers80
OwnerOrganization
Seen on GitHub Trending
- 2026-10-28 — #7 daily in python · +953 ★
- 2026-10-28 — #17 monthly in python · +4,353 ★
- 2026-10-27 — #2 daily in python · +214 ★
- 2026-10-27 — #7 daily · +214 ★
GitHub topics
agent-securityagent-skillsagentic-aiai-securityclaude-codemcpprompt-injectionsecurity-scannersecurity-toolssecurity-workflowsupply-chain-security
Links
- GitHub: github.com/NVIDIA/SkillSpector
- Homepage: https://docs.nvidia.com/skills/scanning-agent-skills
- Releases · Issues · Hacker News mentions
README
Loading README…
Blurb generated by claude-haiku-5-5 2d ago. Star deltas marked ~ are extrapolated from partial history.