Tool · curated 22 Aug 2026
GitHub - NVIDIA/SkillSpector: Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
First reported github.com
Coverage timeline
Single-source analysis — first reported, latest, and curated coincide.
Why it matters
SkillSpector gives defenders a way to vet third-party AI agent skills for prompt injection, data-exfiltration, and supply-chain threats before they are installed into agentic environments like Claude Code and MCP.
NVIDIA's SkillSpector is an open-source security scanner that inspects AI agent skills for vulnerabilities, malicious patterns, prompt injection, data exfiltration, and supply-chain risks before installation, supporting Claude Code, Codex, and MCP skills. The GitHub repository is publicly available with ongoing commits and releases.