{"version":"v1","licence":"CC-BY-4.0","id":"skillspector","name":"SkillSpector","repo":"NVIDIA/SkillSpector","repository_url":"https://github.com/NVIDIA/SkillSpector","docs_url":"https://github.com/NVIDIA/SkillSpector#readme","description":"Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks i…","summary":"Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks i… Added from the nightly trending feed on 2026-10-27 with 22,247 GitHub stars. So far only the licence comes from GitHub; the other facts are unknown until someone checks them.","capabilities":["agent-skills"],"tags":["MCP support","Claude Code","Codex","Agent skills","Security"],"alternatives":[],"facts":{"runs_locally":{"status":"yes","value":"Yes, a local scanner; static analysis needs no LLM and LLM analysis can use a local Ollama server","source_url":"https://github.com/NVIDIA/SkillSpector/blob/HEAD/README.md","checked_at":"2026-10-29","validation":"documentation_review","modes":["local"],"untrusted_source_quote":"skillspector scan ./my-skill/ --no-llm --format json --output report.json"},"code_license":{"status":"yes","value":"Apache-2.0","source_url":"https://github.com/NVIDIA/SkillSpector#license","checked_at":"2026-10-27","confidence":"medium","validation":"documentation_review","spdx":"Apache-2.0"},"model_license":{"status":"yes","value":"No bundled weights; optional LLM analysis uses whichever provider or local model you configure","source_url":"https://github.com/NVIDIA/SkillSpector/blob/HEAD/README.md","checked_at":"2026-10-29","validation":"documentation_review","spdx":null,"applies":false,"untrusted_source_quote":"For the best results, configure an OpenAI-compatible LLM endpoint for"},"commercial_use":{"status":"yes","value":"Yes, Apache-2.0 allows commercial use","source_url":"https://github.com/NVIDIA/SkillSpector/blob/HEAD/LICENSE","checked_at":"2026-10-29","validation":"documentation_review","untrusted_source_quote":"Apache License"},"paid_services":{"status":"partial","value":"Static scans are free; best results need an LLM provider, which may need a paid API key unless you run a local model","source_url":"https://github.com/NVIDIA/SkillSpector/blob/HEAD/README.md","checked_at":"2026-10-29","validation":"documentation_review","required":[],"optional":[],"untrusted_source_quote":"For the best results, configure an OpenAI-compatible LLM endpoint for"},"hardware":{"status":"unknown","value":"Not documented (checked README)","validation":"documentation_review","cpu_ok":null,"min_vram_gb":null,"min_ram_gb":null},"platforms":{"status":"unknown","value":"Not documented; the README shows Python 3.12+ and a Docker image but no Windows/macOS/Linux support matrix","validation":"documentation_review","windows":"unknown","macos":"unknown","linux":"unknown"},"setup":{"status":"yes","value":"Medium; install with uv or pip (Python 3.12+) or build the Docker image; LLM scans also need provider credentials","source_url":"https://github.com/NVIDIA/SkillSpector/blob/HEAD/README.md","checked_at":"2026-10-29","validation":"documentation_review","level":"medium","untrusted_source_quote":"uv tool install git+https://github.com/NVIDIA/skillspector.git"}},"metrics":{"stars":24016,"forks":2071,"contributors":116,"archived":false,"last_push_at":"2026-11-02T22:33:56Z","latest_release":{"tag":"v2.13.3","published_at":"2026-11-02T06:44:11Z"},"fetched_at":"2026-11-03T01:20:55.050Z"},"url":"https://repoquarry.dev/projects/skillspector","note":"Installation guidance: follow docs_url. This service never installs or runs code."}