buildforpeople.dev

Honorary mentionLiveOpen source

SkillSpector

Scans AI agent skills for prompt injection, data exfiltration and supply-chain risks before you install them.


A security scanner for Claude Code, Codex and MCP skills. It looks for vulnerabilities, malicious patterns, prompt injection, data exfiltration and supply-chain risks, so you can check a skill before adding it to your agent.

Made by NVIDIA and released under the Apache-2.0 license.