Sponsor

SkillSpector

Scan agent skills before you install them

SkillSpector preview

About

NVIDIA security scanner for agent skills

Install with uv tool install git+https://github.com/NVIDIA/skillspector.git, then skillspector scan <repo|url|zip|dir>. Part of NVIDIA’s Verified Skills pipeline. Can run as a local MCP server so agents gate installs on scan results.

Features

  • 68 vulnerability patterns across 17 categories
  • Scan Git repos, URLs, zips and local skills
  • Optional LLM semantic analysis
  • MCP mode to gate skill/MCP installs
  • OSV.dev dependency lookup
  • Apache-2.0, Pi and OpenCode extensions

Install

Related skills

All skills
All articles

More MCP Servers

View all

anon.li

Let your agent manage private email aliases and encrypted file drops over OAuth MCP

Doop

Open source multiplayer design canvas where humans and AI agents design together over MCP

ImageSVG

Turn images in ChatGPT into editable SVG through a remote MCP server