$ loading_
Scan AI skills before install for injections, leaks, and supply-chain risks.
Copy the install command and let the AI configure it · recommended for beginners
No copy-paste install info for "SkillSpector" yet — see the docs or source repo.
Security or platform teams can use it as a pre-check before admitting AI skills into an internal registry. It helps catch injection or exfiltration risks early and reduce unsafe deployments.
Developers can scan unknown Claude Code, Codex, or MCP skills before installing them. It helps decide whether the package is safe enough to proceed.
Use it to screen for supply-chain risks when you worry an AI skill’s dependencies or behavior may have been tampered with. It is useful for quick risk checks on external capabilities.
It is a security scanner for AI agent skills. It checks for malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks before installation.
The description says it can be used for Claude Code, Codex, and MCP skills. No further scope is provided.
The provided material does not specify installation steps or dependency requirements; see the source repository.
Scan AI agent skill files for credential theft and prompt injection threats.
Scan AI skill packages for malicious docs and scripts before execution.
Statically scan Claude Code skills, plugins, or MCP servers for malware risks.
Scan AI agents, MCP servers, and skills for security risks.
Scan AI agents for tool-calling vulnerabilities and surface key security risks.
Scan Claude Code configs for vulnerabilities, misconfigurations, and prompt injection risks.