Directory / Agent skill / SkillSpector
SkillSpector
NVIDIA's open-source security scanner for AI agent skills: checks a repo, URL, zip or folder against 71 vulnerability patterns (prompt injection, data exfiltration, MCP tool poisoning and more) and gives a 0-100 risk score before you install a skill.
💲 Open source (Apache-2.0). Optional LLM semantic stage uses your own model access. Source: github.com (checked Oct 27, 2026).
Pros & cons
👍 Pros
- Static analysis plus optional LLM review
- Terminal, JSON, Markdown and SARIF output for CI
- Plugs into Pi and OpenCode sessions
👎 Cons
- Python 3.12+ CLI, more for developers than vibe coders
- Static rules can flag false positives (baseline suppression helps)
Latest release
Trending on GitHub
SkillSpector is on GitHub's daily trending list (about 22.5k stars) with active parser fixes landing Oct 27. It powers NVIDIA's Verified Skills pipeline. Source ↗
Ranked in
Alternatives to SkillSpector
Claude Code
Coding agentAnthropic's agentic coding tool — understands your codebase, edits files, runs commands, and helps you ship faster.
Cursor
AI code editorAn AI coding agent for building ambitious software — agents turn ideas into code so you can hand off tasks.
AI SDK (Vercel)
Agent frameworkA unified TypeScript SDK for building AI apps with modern streaming, fallbacks, and multi-model support.
Ratings are preliminary editorial opinions. Spotted something out of date? Tell us. Listed here? Get the badge. Some links are affiliate links; they never affect rankings.