{"data":{"slug":"skillspector","name":"SkillSpector","tagline":"Apache NVIDIA scanner for agent skills before you install them","category":"agents","categoryName":"AI Agents","url":"https://docs.nvidia.com/skills/scanning-agent-skills","github":"https://github.com/NVIDIA/SkillSpector","pricing":"open-source","hook":"SkillSpector is NVIDIA’s security scanner for AI agent skills: check Claude Code / Codex / MCP skills for vulns, prompt injection, exfil, and supply-chain risk before install.","whatsGood":"Apache-2.0 (NVIDIA/SkillSpector). Part of the NVIDIA Verified Skills pipeline; docs at docs.nvidia.com/skills. Research-backed framing (high vuln rates in skill corpora). Gate installs in CI or locally instead of trusting a skill README.","theCatch":"Vs Semgrep/Trivy-class general SAST: this is skill/MCP-skill oriented, not a whole-repo AppSec suite. Scanner signal ≠ proof a skill is safe forever — still review permissions and network egress; NVIDIA catalog signing is a separate trust path from running the OSS scanner alone.","verdict":"Apache skill security gate when your agents install third-party skills — run it before the skill runs you.","addedAt":"2026-09-25","featured":false,"domain":"AI Agents","subSpecialty":"Agents","subcategory":"Security","tags":["mcp","self-host","permissive","coding-agents","skills","security","active","fast-stars"],"capabilities":["mcp"],"surfaces":["MCP","Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"Apache-2.0","githubStars":20509,"starsPerWeek":675,"access":"free","archived":false,"repo":{"createdAt":"2026-03-21","pushedAt":"2026-10-19","license":"Apache-2.0","archived":false,"checkedAt":"2026-10-19"}},"related":[{"slug":"claude-code","name":"Claude Code","tagline":"Terminal-first coding agent with deep repository context"},{"slug":"cursor","name":"Cursor","tagline":"The AI-first code editor that understands your codebase"},{"slug":"devin","name":"Devin","tagline":"Autonomous AI engineer for defined engineering tasks"},{"slug":"stagehand","name":"Stagehand","tagline":"AI-native browser automation that mixes code and natural language"},{"slug":"browser-use","name":"Browser Use","tagline":"Open-source framework for LLM-driven browser agents"}],"links":{"self":"/api/gems/skillspector","html":"/gems/skillspector","markdown":"/gems/skillspector.md","category":"/api/gems?category=agents","categoryPage":"/stacks/agents"}}