Comment “SKILL” and I’ll send you the scanner.
Claude Skills can be incredibly useful, but installing a skill also means you’re trusting the code, instructions, and files inside it.
That’s why NVIDIA built SkillSpector, an open-source security scanner designed to check AI agent skills before you install them.
It looks for risks including prompt injection, data exfiltration, privilege escalation, supply-chain issues, dangerous code patterns, tool misuse, and more.
You can scan a local skill, a
SKILL.md file, a ZIP file, or even a GitHub repository directly.
If you’re regularly installing Claude Skills from GitHub, this is definitely worth knowing about.
#ClaudeCode #AISecurity #CyberSecurity #AI #NVIDIA