# Scan agent skills before installation with SkillSpector

> Use SkillSpector to scan Claude Code, Codex, Gemini, MCP, and other agent skills for vulnerabilities, malicious patterns, prompt injection, data exfiltration, and supply-chain risk before installation.

- Skill: `agentskillexchange/scan-agent-skills-before-installation-with-skillspector` (Agent Skill)
- Install (CLI): `npx skillmds@latest add agentskillexchange/scan-agent-skills-before-installation-with-skillspector`
- Raw SKILL.md: https://api.skillmd.com/api/skills/agentskillexchange/scan-agent-skills-before-installation-with-skillspector/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: agentskillexchange (https://skillmd.com/u/agentskillexchange)
- Updated: 2026-09-08
- Page: https://skillmd.com/skills/agentskillexchange/scan-agent-skills-before-installation-with-skillspector

---


# Scan agent skills before installation with SkillSpector

Use SkillSpector to scan Claude Code, Codex, Gemini, MCP, and other agent skills for vulnerabilities, malicious patterns, prompt injection, data exfiltration, and supply-chain risk before installation.

## Prerequisites

SkillSpector, uv or Docker, optional MCP extra, optional LLM provider credentials for semantic analysis

## Installation

Install or set up from the source-backed instructions:

uv tool install git+https://github.com/NVIDIA/skillspector.git; optional MCP mode: uv tool install 'skillspector[mcp] @ git+https://github.com/NVIDIA/skillspector.git'; then run skillspector scan

- Source: https://github.com/NVIDIA/SkillSpector

## Documentation

- https://docs.nvidia.com/skills/scanning-agent-skills

## Source

- [Agent Skill Exchange](https://agentskillexchange.com/skills/scan-agent-skills-before-installation-with-skillspector/)