SkillSpector

Scan agent skill packages for suspicious instructions and risky behavior before installation.

Why it is listed

Addresses the risk of importing untrusted skills into a coding-agent environment.

Run `uv tool install git+https://github.com/NVIDIA/skillspector.git`.

Other active tools sharing a workflow category and a supported agent.

Intercept risky file and Git commands before a coding agent executes them.

Keep a durable task plan in files that survives context clearing and session restarts.

Scan agent skills and MCP servers for security issues before adoption.

Provide packaged specialist agents and reusable tasks for coding workflows.