Scan agent skills before installation with SkillSpector
Use SkillSpector to scan Claude Code, Codex, Gemini, MCP, and other agent skills for vulnerabilities, malicious patterns, prompt injection, data exfiltration, and supply-chain risk before installation.
Prerequisites
SkillSpector, uv or Docker, optional MCP extra, optional LLM provider credentials for semantic analysis
Installation
Install or set up from the source-backed instructions:
uv tool install git+https://github.com/NVIDIA/skillspector.git; optional MCP mode: uv tool install 'skillspector[mcp] @ git+https://github.com/NVIDIA/skillspector.git'; then run skillspector scan