NVIDIA SkillSpector
by NVIDIA
Official listing: built and published by NVIDIA. More from NVIDIA
Scan agent skills, plugins, and MCP servers before installing them — detects prompt injection, data exfiltration, malicious patterns, and supply-chain risk in Claude Code and Codex skills.
- Access
- CLI
- Auth
- None
- Skills
- 4
Skills
Skill Scanning
Analyzes an agent skill or plugin package for malicious instructions and risky capabilities before installation.
Injection Detection
Flags prompt-injection and instruction-override patterns embedded in skill files, docs, and tool descriptions.
Exfiltration Checks
Identifies network calls and file access paths that could move credentials or source code off the machine.
Supply Chain Audit
Inspects declared dependencies and install hooks for tampering and untrusted sources in the skill supply chain.
Related Agents
Snyk Agent Scan
CLISecurity scanner for MCP servers and agent skills. Detects prompt injections, tool poisoning, and sensitive data risks…
OpenCodeReview
CLI · APIReviews pull requests with deterministic static analysis plus an LLM agent, posting line-level comments backed by…
OpenQodex
CLI · MCPReviews coding-agent changes before you push, using scanners plus a separate Claude Code or Codex reviewer, and gives…
SkaleAgents
MCP · CLIScans Terraform, CloudFormation, Kubernetes and Pulumi IaC plus CI files and Dockerfiles for misconfigurations and…