Repo RadarNewsletter

Trending/MCP servers

MCP serversAgents & orchestrationVibe coding

NVIDIA/SkillSpector

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks…

★ 22.2KWeek rank 32 · star gain starts at the next snapshot

View on GitHub

From the README

SkillSpector **Security scanner for AI agent skills.** Detect vulnerabilities, malicious patterns, and security risks before installing agent skills. Overview AI agent skills (used by Claude Code, Codex CLI, Gemini CLI, etc.) execute with implicit trust and minimal vetting.

Setup prompt

Paste this into Cursor or Claude Code. It only includes install lines found in the README, and it asks the agent to review the code first.

Set up the GitHub repository NVIDIA/SkillSpector (Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.).
Repository: https://github.com/NVIDIA/SkillSpector

Official install commands found in the README:
uv tool install git+https://github.com/NVIDIA/skillspector.git
uv tool install 'skillspector[mcp] @ git+https://github.com/NVIDIA/skillspector.git'
git clone https://github.com/NVIDIA/skillspector.git
uv venv .venv && source .venv/bin/activate
docker run --rm -v "$PWD:/scan" skillspector scan ./my-skill/ --no-llm
docker run --rm \
docker run --rm --user "$(id -u):$(id -g)" \
uv tool install --force 'skillspector[mcp] @ git+https://github.com/NVIDIA/skillspector.git'

Clone the repository and follow those steps. Do not invent package names or extra install commands.
Review the code before running anything.

Buzz by window

Same mentions, three half-lives. This is not a star history. Star gain appears after a second daily snapshot.

  • Today2.25
  • Week3.78
  • Month4.08

Spotted on

Related

Report a problem or request removal