Scan agent skills before installation with SkillSpector

Use SkillSpector to scan Claude Code, Codex, Gemini, MCP, and other agent skills for vulnerabilities, malicious patterns, prompt injection, data exfiltration, and supply-chain risk before installation.

agentskillexchange Updated 28 repo stars

File contents

Scan agent skills before installation with SkillSpector

Use SkillSpector to scan Claude Code, Codex, Gemini, MCP, and other agent skills for vulnerabilities, malicious patterns, prompt injection, data exfiltration, and supply-chain risk before installation.

Prerequisites

SkillSpector, uv or Docker, optional MCP extra, optional LLM provider credentials for semantic analysis

Installation

Install or set up from the source-backed instructions:

uv tool install git+https://github.com/NVIDIA/skillspector.git; optional MCP mode: uv tool install 'skillspector[mcp] @ git+https://github.com/NVIDIA/skillspector.git'; then run skillspector scan

Documentation

Source

agentskillexchange/skills/tree/main/skills/scan-agent-skills-before-installation-with-skillspector commit 2de0bec8ad

Frequently asked questions

npx skillmds@latest add agentskillexchange/scan-agent-skills-before-installation-with-skillspector