SkillSpector

NVIDIA's security scanner for agent skills: answers whether a skill is safe to install before you install it. 71 vulnerability patterns across 17 categories (prompt injection, data exfiltration, supply chain, MCP tool poisoning), static plus optional LLM semantic analysis, live OSV.dev CVE lookups,