skillspector
skillspector is Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills b.... It is ranked #1599 on the Dev Radar, in Security, first seen 30 days ago and shared in 3 posts (160.4k views).
GitHub - NVIDIA/SkillSpector: Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them. · GitHub Skip to content Navigation Menu Sign in Search / Sign in Sign up Appearance settings You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert {{ message }} Repository navigation SkillSpector Public…
What people said about skillspector on X
Give Hermes the Skills 🚀
— @HermesWatcher, 18 days ago · 111 likes · see the post
眼下skill装得满天飞，GitHub上随手扒一个就往机器上搁。可你八成没想过：skill哪只是几行字，它绑着能跑起来的代码，一执行，权限跟你自己没两样。 为了省那10分钟，它就能偷翻你的环境变量、把API密钥悄没声地捅出去。有研究讲，大概四分之一的公开skill带着漏洞，还有一小撮压根就是奔着使坏来的。 SkillSpector就是冲这个来的，装之前先过一遍： 1️⃣ 静态快扫，专揪凭据窃取、数据外泄、提示词注入，还实时比对CVE 2️⃣ 可选再上LLM分析意图，把误报筛掉 末了甩你一个0-100的风险分，外加一句话定论：能装、掂量着来、还是碰都别碰。Apache 2.0，认Claude Code、Codex、Gemini。…
— @bkdgiffug, 8 days ago · 31 likes · see the post
Alternatives to skillspector
- rea — Reverse engineer programs with REA (rea.tools): native binaries, .NET assemblies, Electron/JavaScript apps, Android…
- Steal My Bitcoin — Someone has created a vulnerable PHP website, loaded it with a Bitcoin wallet, and challenged the Internet to hack…
- ultrafuzz — End-to-end agentic smart contract fuzzing and threat hunting - monad-developers/ultrafuzz
- cve.now — puts the ones that need action in one free feed, and your coding agent can check them for you.
- GitHub Docs — You can customize your profile so that other people can get a better sense of who you are and the work you do.
- security-audit-skill — I highly recommend cloudflare's security audit skill
skillspector in numbers
- Rank on the Dev Radar: #1599 of 8798
- Shared in 3 posts by 3 accounts: @HermesWatcher, @bkdgiffug
- 160.4k views on those posts
- First seen 30 days ago, last shared 8 days ago
- Pricing seen by AGK Intelligence: open source
- Market: Security
FAQ
What is skillspector?
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills b... It was first shared on X 30 days ago and is ranked #1599 on the Dev Radar.
Is skillspector free?
It is open source.
Who shared skillspector?
3 accounts on X, including @HermesWatcher, @bkdgiffug, in 3 posts totalling 160.4k views.
Every post is read and classified by AGK Intelligence: what it is, which market it belongs to, and whether the link is a real tool. 31.2k posts from 5k X accounts over the last 21 days, 8.8k tools, 12 markets. New posts are collected several times an hour and the full ranking is recomputed every hour — last update 2026-10-30 20:22 UTC. Full method.