SkillSpector
independent scanner · by NVIDIA · open source ↗
About this scanner
SkillSpector is an open-source security scanner for AI agent skills, published by NVIDIA under the Apache-2.0 license.
It checks skills against 68 vulnerability patterns across 17 categories — including prompt injection, data exfiltration, privilege escalation, supply-chain risks, dangerous code (AST analysis), taint tracking, and YARA signatures — and produces a 0–100 risk score with an overall severity.
What the verdicts mean
Every auditor on SkillMD reports on the same five-tier scale. For SkillSpector:
PASS
Overall severity LOW (risk score in the safe range)
CAUTION
Overall severity MEDIUM
WARNING
Overall severity HIGH
FAIL
Overall severity CRITICAL
INCONCLUSIVE
Scan could not complete