SkillSpector
Pilot it+659 this week★ 14,975 · 1,255 forks
AI security scanner for agent skills
Worth a timeboxed spike before you bet on it.
Who it's for
Small teams using AI agents and skills
What it replaces
Manual security reviews of AI code
The catch
May require significant customization and integration effort
Your first hour
Run SkillSpector on a small subset of existing AI skills
The numbers
Stars14,975
Forks1,255
Stars added (7d)+659
Open issues79
LanguagePython
LicenceApache-2.0
Last pushUpdated 2 days ago
Project age5 months old
Maintainers describe it as: “Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.”
agent-securityagent-skillsagentic-aiai-securityclaude-codemcpprompt-injectionsecurity-scannersecurity-toolssecurity-workflow
SkillSpector, in short
- Should a small team use SkillSpector?
- Pilot it. Worth a timeboxed spike before you bet on it. Small teams using AI agents and skills
- What does SkillSpector actually do?
- AI security scanner for agent skills
- What does SkillSpector replace?
- Manual security reviews of AI code
- What is the downside of SkillSpector?
- May require significant customization and integration effort
- Can SkillSpector be used in a commercial product?
- Its licence is Apache-2.0, which is permissive and generally fine for commercial use. Confirm against the LICENSE file in the repository.