SkillSpector

About SkillSpector

SkillSpector Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks before installing agent skills. Overview AI agent skills (used by Claude Code, Codex CLI, Gemini CLI, etc.) execute with implicit trust and minimal vetting. Research shows that 26.1% of skills contain vulnerabilities and 5.2% show likely malicious intent. SkillSpector helps you answer: "Is this skill safe to install?" Documentation Development guide — Architecture, package layout, and how to extend the analyzer pipeline.

agent-security agent-skills agentic-ai ai-security claude-code mcp prompt-injection security-scanner security-tools security-workflow

Quick Facts

Stars	14,885
Forks	1,239
Language	Python
Category	MCP Server
License	Apache-2.0
Quality Score	76.5327839230254/100
Open Issues	81
Last Updated	2026-08-22
Created	2026-03-21
Platforms	claude-code, cli, codex, mcp, python
Est. Tokens	~18k

Compatible Skills

These tools work well together with SkillSpector for enhanced workflows:

agent-scan — semantic(0.48)+complementary+same_lang+similar_pop+shared_platform (67%)
Semia — semantic(0.29)+complementary+same_lang+similar_pop+shared_platform (60%)
claude-code-security-review — semantic(0.23)+complementary+same_lang+similar_pop+shared_platform (58%)
repo-forensics — semantic(0.47)+complementary+same_lang+shared_platform (57%)
mcp-scanner — semantic(0.16)+complementary+same_lang+similar_pop+shared_platform (56%)

More MCP Server Tools

Explore other popular mcp server tools:

ECC ⭐ 242.4k
n8n ⭐ 202.1k
everything-claude-code ⭐ 186.6k
dify ⭐ 153.3k
open-webui ⭐ 149.6k
cc-switch ⭐ 128.7k
graphify ⭐ 109.7k
gemini-cli ⭐ 106.6k
awesome-mcp-servers ⭐ 92.5k
servers ⭐ 89.7k

View all MCP Server tools →

Popular Python Agent Tools

hermes-agent ⭐ 234.5k · Codex Skill
AutoGPT ⭐ 186.8k · Agent Tool
skills ⭐ 170.9k · Claude Skill
langflow ⭐ 153.6k · Agent Tool
open-webui ⭐ 149.6k · MCP Server

Frequently Asked Questions

What is SkillSpector?

SkillSpector is Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills befo. It is categorized as a MCP Server with 14.9k GitHub stars.

What programming language is SkillSpector written in?

SkillSpector is primarily written in Python. It covers topics such as agent-security, agent-skills, agentic-ai.

How do I install or use SkillSpector?

You can find installation instructions and usage details in the SkillSpector GitHub repository at github.com/NVIDIA/SkillSpector. The project has 14.9k stars and 1239 forks, indicating an active community.

What license does SkillSpector use?

SkillSpector is released under the Apache-2.0 license, making it free to use and modify according to the license terms.

View on GitHub → Browse MCP Server tools