NVIDIA · Agent Skill Scanner

SkillSpector v2.11.0

Since Week 24 2026: a security scanner for agent skills across Claude Code, Codex CLI, Gemini CLI and MCP, matching 71 vulnerability patterns in 17 categories - prompt injection, data exfiltration, privilege escalation, supply-chain risk - through fast static scanning, an optional LLM semantic pass, live OSV.dev CVE lookups and a 0-100 risk score. It was built on an empirical study of 42,447 skills that found 26.1% carrying vulnerabilities and 5.2% showing likely malicious intent. Apache-2.0, 16.3k stars, v2.11.0 tagged 28 August.