AITeamGuide Hub · Skill
SkillSpector
NVIDIA's scanner that checks agent skills and MCP servers for malicious patterns, prompt injection and data leaks before you install them.
Skill★ 21k starsArchived on GitHubApache-2.0Security
Key facts
- Type
- Skill
- Jobs it fits
- Vet a skill or MCP server before installing
- Fields
- Security
- Works with
- Claude Code, Codex, Any MCP client
- GitHub
- NVIDIA/SkillSpector
- Licence
- Apache-2.0
- Stars
- 20,786 as of October 21, 2026
- Last updated
- October 21, 2026 (last push to GitHub)
- Author
- @NVIDIA
- Submitted by
- @aiteamguide
- Added to the Hub
- October 21, 2026
Install / Use it
Apache-2.0Local MCP server
Download skill (ZIP) View source
Cursor
Install SkillSpector with its MCP extra first: uv tool install 'skillspector[mcp] @ git+https://github.com/NVIDIA/skillspector.git'
Or paste into ~/.cursor/mcp.json
{
"mcpServers": {
"skillspector": {
"command": "skillspector",
"args": [
"mcp"
]
}
}
}Claude Code
Install SkillSpector with its MCP extra first: uv tool install 'skillspector[mcp] @ git+https://github.com/NVIDIA/skillspector.git'
Command from the README
claude mcp add skillspector -- skillspector mcpClaude Desktop
Install SkillSpector with its MCP extra first: uv tool install 'skillspector[mcp] @ git+https://github.com/NVIDIA/skillspector.git'
Add to claude_desktop_config.json (Settings → Developer → Edit Config), then restart Claude
{
"mcpServers": {
"skillspector": {
"command": "skillspector",
"args": [
"mcp"
]
}
}
}VS Code
Install SkillSpector with its MCP extra first: uv tool install 'skillspector[mcp] @ git+https://github.com/NVIDIA/skillspector.git'
Or from the command line
code --add-mcp '{"name":"skillspector","type":"stdio","command":"skillspector","args":["mcp"]}'Codex
Install SkillSpector with its MCP extra first: uv tool install 'skillspector[mcp] @ git+https://github.com/NVIDIA/skillspector.git'
Run in your terminal
codex mcp add skillspector -- skillspector mcpQuickstart
Install
uv tool install git+https://github.com/NVIDIA/skillspector.gitSafety: Runs code from a third-party repo. Review the source and the permissions before installing.
Commands and configs are taken from the project's README and re-wrapped in each app's documented format. If they differ, the README wins.
More from the Hub
-
Agent
Strix
Open-source AI agents that act like a penetration tester: they run your app, try real attacks and report vulnerabilities with proof and fixes.
Security · Software development★ 71k
-
Agent
PentAGI
A self-hosted system of autonomous agents for penetration testing, running tools in isolated containers with a web UI and reports.
Security★ 32k
-
Skill
Trail of Bits Skills
Security research and code-audit skills from the security firm Trail of Bits.
Security · Software development★ 7.7k
Summary written by AITeamGuide in our own words. GitHub numbers come from the public GitHub API and refresh daily. Maintainer and want a correction or removal? Tell us. Got something similar? Submit it to the Hub.