maelbel

Skillspector Web — Design skill for Claude Code

Design community

Web UI for NVIDIA/skillspector — scan agent skills for vulnerabilities before you install them.

How to install Skillspector Web

This entry records only its repository, not the path inside it, so there is no exact command to give. Open maelbel/skillspector-web and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Skillspector Web does

Web UI for NVIDIA/skillspector — scan agent skills for vulnerabilities before you install them.

Alternatives in Design

Frontend Design — Create distinctive, production-grade frontend interfaces with high design quality 94.1k ★
CloudCLI — 8,400+ Free open-source web/mobile UI for Claude Code, Cursor CLI, and Codex 8.7k ★
NotebookLM Automation — Complete programmatic access to Google NotebookLM—including capabilities not exposed in the web UI 6.8k ★

README

Skillspector Web

**Is this skill safe to install?** A self-hosted web app that scans AI agent skills — Claude Code, Codex, MCP — for prompt injection, data exfiltration and other vulnerabilities before you install them. Powered by [NVIDIA/skillspector](https://github.com/NVIDIA/skillspector).

[![CI](https://github.com/maelbel/skillspector-web/actions/workflows/ci.yml/badge.svg)](https://github.com/maelbel/skillspector-web/actions/workflows/ci.yml) [![Release](https://img.shields.io/github/v/release/maelbel/skillspector-web?color=16a34a)](https://github.com/maelbel/skillspector-web/releases) [![License: MIT](https://img.shields.io/badge/license-MIT-blue)](./LICENSE) ![Nuxt 4](https://img.shields.io/badge/Nuxt-4-00DC82?logo=nuxt&logoColor=white) ![FastAPI](https://img.shields.io/badge/FastAPI-Python%203.13-009688?logo=fastapi&logoColor=white)

[Features](#features) · [Quick start](#quick-start) · [Configuration](#configuration) · [Deployment](#deployment) · [Architecture](#architecture) · [Security model](#security-model) · [Contributing](./CONTRIBUTING.md)

The Skillspector Web home page: a skill URL field with examples, an AI analysis toggle, and a list of recent scans with their verdicts.

Features

Paste a link, get a verdict. Scan a repository or a single SKILL.md on GitHub, GitLab, Bitbucket or Hugging Face and get a 0–100 risk score, a severity and a clear recommendation: Safe to install, Review before installing or Do not install.
20+ static analyzers. Prompt injection, data exfiltration, dangerous code, supply chain and MCP tool poisoning — every check in skillspector's own pipeline, run as a library, not a CLI wrapper.
**Optional deep analysis