SkillSpector

SkillSpector is an NVIDIA security scanner that detects vulnerabilities, malicious patterns, and security risks in AI agent skills before installation, addressing research showing that 26.1% of skills contain vulnerabilities and 5.2% show likely malicious intent. The tool performs multi-stage analysis across 69 vulnerability patterns in 17 categories, including prompt injection, data exfiltration, and privilege escalation, with support for multiple input formats and output reports. SkillSpector is available as open-source software installable via CLI, pip, or Docker, and is part of NVIDIA's Verified Skills pipeline for evaluating agent skills before publication.