SkillSpector
AI代理技能安全扫描器。在安装之前，检测Claude Code、Codex和MCP技能中的漏洞、恶意模式、安全风险、提示注入、数据外泄和供应链风险。
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
怎么安装
git clone https://github.com/NVIDIA/SkillSpector ~/.claude/skills/SkillSpector 简介
SkillSpector **Security scanner for AI agent skills.** Detect vulnerabilities, malicious patterns, and security risks before installing agent skills. Overview AI agent skills (used by Claude Code, Codex CLI, Gemini CLI, etc.) execute with implicit trust and minimal vetting. Research shows that **26.1% of skills contain vulnerabilities** and **5.2% show likely malicious intent**. SkillSpector helps you answer: **"Is this skill safe to install?"** SkillSpector is part of the NVIDIA Verified Skills pipeline, which scans, evaluates, and signs agent skills before publication. Skills that pass are p…
推荐参考
信息
- 协议
- Apache-2.0
- 语言
- Python
- GitHub 星标
- 18.2K
- 月下载
- –
- 最近更新
- 2026-09-24
- 创建于
- 2026-03-21
基础安全检查
- 检查结果
- curated 收录但无 npm 包/安装命令
- 收录来源
- curated:hesreallyhim/awesome-claude-code
- 主题标签
- agent-security, agent-skills, agentic-ai, ai-security, claude-code, mcp, prompt-injection, security-scanner, security-tools, security-workflow, supply-chain-security
同类推荐
ruflo
ruvnet/claude-flow
🌊 原始的代理元框架。部署智能多智能体群体，协调自主工作流，构建对话式AI系统。具备自适应记忆、自学习智能、RAG集成，并原生集成Claude Code / Codex / Hermes等。