NVIDIA SkillSpector
Updated SkillSpector
Summary
SkillSpector scans agent skills for vulnerabilities and malicious patterns before install. The repository was created March 21, 2026, and includes an MCP server.
- Tool
- SkillSpector
- Category
- Agent infra
- Date
- Open source
- Yes
- License
- Apache-2.0
- MCP
- Yes
- Pricing
- Apache-2.0. No paid SKU is stated on the repository page we used.
- Sources
The NVIDIA/SkillSpector repository was created on March 21, 2026. It is Apache-2.0 and requires Python 3.12 or newer. The README calls it a security scanner for AI agent skills: it looks for vulnerabilities, malicious patterns, prompt injection, data exfiltration, and supply-chain risk in skills used by Claude Code, Codex, and MCP, before you install them.
NVIDIA's README reports a figure from its research dataset: in a 31,132-skill analyzed subset, 26.1 percent of skills contain vulnerabilities and 5.2 percent show likely malicious intent. That is NVIDIA's number, not a scan we ran.
The same README documents an MCP server. skillspector mcp exposes one tool, scan_skill, which scans a Git URL, file URL, zip, markdown file, or directory and returns a risk score, severity, recommendation, and safe_to_install. You can register it with Claude Code using claude mcp add skillspector -- skillspector mcp. HTTP transport is documented as shipping without authentication; the README tells you to put it behind an authenticating proxy if you bind a routable interface, and it rejects local paths over HTTP.
SkillSpector is part of the NVIDIA Verified Skills pipeline. The hub is SkillSpector.
Alternatives
| Tool | License | Pricing note |
|---|---|---|
SkillSpectorThis launchApache-2.0 scanner from NVIDIA for agent skills and MCP installs, with a local MCP server that exposes scan_skill. | Apache-2.0 | Apache-2.0. No paid tier is described on the repository page we used. |
WinDbgMicrosoft's Windows debugger. WinDbg MCP, from version 1.2610.1001.0, lets Copilot query an active session. | — | WinDbg MCP is included with WinDbg starting at version 1.2610.1001.0. |
GitHub MCP serverGitHub's official MCP server. Version 1.0.0 shipped April 16, 2026 with organization issue fields and an MCP Apps flag. | Open source | The server repository is public. GitHub product charges, if any, are your existing GitHub plan. |
Questions
What is SkillSpector?
SkillSpector scans AI agent skills for vulnerabilities, malicious patterns, prompt injection, data exfiltration, and supply-chain risk before you install them. The NVIDIA/SkillSpector repository is Apache-2.0.
Does SkillSpector have an MCP server?
Yes. The README documents skillspector mcp and a single tool, scan_skill, for Claude Code, Codex CLI, Gemini CLI, or a remote HTTP caller.
Filed on Agent Radar. Claims in this note are limited to the sources above.