Skillspector — Security skill for Claude Code
Security scanner for AI agent skills.
How to install Skillspector
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open x-cmd-install/skillspector and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What Skillspector does
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Alternatives in Security
- Security Guidance — Hook that warns about command injection, XSS, and unsafe patterns 14k ★
- Security Guardian — Comprehensive security analysis for RTK CLI tool, focusing on command injection, shell escaping, hook security 11.9k ★
- Promptmap — Security scanner for custom LLM apps 1.2k ★
README
owner-repo: nvidia/skillspector desc: Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
skillspector
Related Skills
Claude Skill Antivirus
Security scanner for Claude Code Skills — 9 engines detect malicious patterns, data exfiltration, dangerous op
Skill Lint
Security scanner for Claude Code / agent skills. Catches prompt injection, obfuscation, credential exfiltratio
Skillguard
Security scanner for AI agent skills. Detects prompt injection, data exfiltration, and malicious payloads befo
Skill Sentinel
A security scanner for Agent Skill packages. Skill Sentinel uses multi-agent AI analysis to detect prompt inje
Cc Skill Audit
Security scanner & PreToolUse firewall for Claude Code third-party skills. Detects undisclosed telemetry, outb
AI Agent Audit
Read-only audit of a local developer machine for AI-agent-related security risks (Linux + macOS). Ten modules
Related Agents
Deep Security Auditor
Adversarial red-team and security compliance specialist. Inspects ASTs for prompt injections, credential leaks
Supply Chain Framework Auditor
Audits dependency CVEs, malicious or over-permissioned SDKs, build-pipeline leftovers (debug flags, test endpo
Rfe Scorer
Scores a single RFE issue against quality rubric. Restricted to Read and Write only to prevent prompt injectio
