NVIDIA SkillSpector
VerifiedOfficialFeaturedby NVIDIA
Official listing: built and published by NVIDIA. More from NVIDIA
Scan agent skills, plugins, and MCP servers before installing them — detects prompt injection, data exfiltration, malicious patterns, and supply-chain risk in Claude Code and Codex skills.
- Access
- CLI
- Auth
- None
- Skills
- 4
Skills
Skill Scanning
Analyzes an agent skill or plugin package for malicious instructions and risky capabilities before installation.
Injection Detection
Flags prompt-injection and instruction-override patterns embedded in skill files, docs, and tool descriptions.
Exfiltration Checks
Identifies network calls and file access paths that could move credentials or source code off the machine.
Supply Chain Audit
Inspects declared dependencies and install hooks for tampering and untrusted sources in the skill supply chain.
Related Agents
Snyk Agent Scan
by Snyk
Security scanner for MCP servers and agent skills. Detects prompt injections, tool poisoning, and sensitive data risks…
OpenCodeReview
by Alibaba
Reviews pull requests with deterministic static analysis plus an LLM agent, posting line-level comments backed by…
SkaleAgents
by Binary Labs LLC
Scans Terraform, CloudFormation, Kubernetes and Pulumi IaC plus CI files and Dockerfiles for misconfigurations and…
HOL Guard
by Hashgraph Online
Blocks risky AI coding agent actions at runtime on your machine — shell commands, secret access, MCP servers, plugins…