{"ok":true,"repo":{"id":277814,"full_name":"NVIDIA/SkillSpector","url":"https://github.com/NVIDIA/SkillSpector","description":"Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.","language":"Python","topics":["agent-security","agent-skills","agentic-ai","ai-security","claude-code","mcp","prompt-injection","security-scanner","security-tools","security-workflow","supply-chain-security"],"stars":22170,"stars_delta":482,"forks":1936,"first_seen":"2026-10-26T11:05:51.142178Z","last_seen":"2026-10-27T00:20:48.572629Z","mentions":1,"platforms":["github"],"score":0.0,"summary":"SkillSpector is an open-source security scanner from NVIDIA for AI agent skills (Claude Code, Codex, MCP, etc.). Before you install a skill, it scans repos, URLs, zips, or files for 71 vulnerability patterns—prompt injection, data exfiltration, supply-chain risks, tool poisoning—using static analysis plus optional LLM review, and produces a 0-100 risk score with SARIF/JSON/Markdown reports.","why":"It's newly released by NVIDIA with striking research stats (over a quarter of analyzed skills contain vulnerabilities), and it's part of NVIDIA's Verified Skills pipeline, driving interest in agent-skill supply-chain security.","audience":"Developers and security teams who install or publish AI agent skills and want to vet them for malicious or risky behavior.","tags":["security","agents","mcp","python","supply-chain-security","scanner"],"summarized_at":"2026-10-26T11:21:10.681561Z","summary_model":"glm-5.3-flash","fetched_at":"2026-10-27T00:21:54.288533Z","meta":{"license":"Apache-2.0","archived":false,"homepage":"https://docs.nvidia.com/skills/scanning-agent-skills","first_stars":21688,"stars_today":214},"pushed_at":"2026-10-23T09:40:29Z","created_at":"2026-03-21T00:28:43Z","watchers":78,"open_issues":175,"mentions_list":[{"platform":"github","url":"https://github.com/NVIDIA/SkillSpector","title":"NVIDIA/SkillSpector","seen_at":"2026-10-27T00:20:48.573113Z"}],"snapshots":[{"captured_at":"2026-10-26T11:21:05.442192Z","stars":21688,"forks":1912},{"captured_at":"2026-10-26T11:36:55.941305Z","stars":21700,"forks":1912},{"captured_at":"2026-10-26T11:51:58.269310Z","stars":21705,"forks":1912},{"captured_at":"2026-10-26T12:07:01.493532Z","stars":21711,"forks":1912},{"captured_at":"2026-10-26T12:21:57.341287Z","stars":21719,"forks":1912},{"captured_at":"2026-10-26T12:36:50.362072Z","stars":21733,"forks":1912},{"captured_at":"2026-10-26T12:51:52.033226Z","stars":21749,"forks":1912},{"captured_at":"2026-10-26T13:07:02.852540Z","stars":21754,"forks":1911},{"captured_at":"2026-10-26T13:22:00.540651Z","stars":21771,"forks":1911},{"captured_at":"2026-10-26T13:37:03.242566Z","stars":21786,"forks":1911},{"captured_at":"2026-10-26T13:52:09.041243Z","stars":21789,"forks":1911},{"captured_at":"2026-10-26T14:06:54.640837Z","stars":21796,"forks":1911},{"captured_at":"2026-10-26T14:22:00.052668Z","stars":21804,"forks":1912},{"captured_at":"2026-10-26T14:37:02.540343Z","stars":21813,"forks":1913},{"captured_at":"2026-10-26T14:52:00.336798Z","stars":21825,"forks":1913},{"captured_at":"2026-10-26T15:07:04.795833Z","stars":21833,"forks":1913},{"captured_at":"2026-10-26T15:22:00.733657Z","stars":21845,"forks":1913},{"captured_at":"2026-10-26T15:36:54.537810Z","stars":21857,"forks":1913},{"captured_at":"2026-10-26T15:51:57.440055Z","stars":21870,"forks":1916},{"captured_at":"2026-10-26T16:07:01.640993Z","stars":21878,"forks":1918},{"captured_at":"2026-10-26T16:22:01.469237Z","stars":21891,"forks":1918},{"captured_at":"2026-10-26T16:36:58.769844Z","stars":21895,"forks":1919},{"captured_at":"2026-10-26T16:51:52.040211Z","stars":21906,"forks":1919},{"captured_at":"2026-10-26T17:06:58.400141Z","stars":21917,"forks":1919},{"captured_at":"2026-10-26T17:21:57.786740Z","stars":21927,"forks":1920},{"captured_at":"2026-10-26T17:36:58.725999Z","stars":21935,"forks":1920},{"captured_at":"2026-10-26T17:51:56.798174Z","stars":21946,"forks":1923},{"captured_at":"2026-10-26T18:07:02.239765Z","stars":21955,"forks":1923},{"captured_at":"2026-10-26T18:21:55.240119Z","stars":21966,"forks":1924},{"captured_at":"2026-10-26T18:37:09.040255Z","stars":21973,"forks":1924},{"captured_at":"2026-10-26T18:51:54.758004Z","stars":21982,"forks":1925},{"captured_at":"2026-10-26T19:07:02.942382Z","stars":21994,"forks":1925},{"captured_at":"2026-10-26T19:21:51.841886Z","stars":22001,"forks":1925},{"captured_at":"2026-10-26T19:36:48.594785Z","stars":22006,"forks":1925},{"captured_at":"2026-10-26T19:51:56.740832Z","stars":22016,"forks":1925},{"captured_at":"2026-10-26T20:06:58.585570Z","stars":22022,"forks":1925},{"captured_at":"2026-10-26T20:22:03.277447Z","stars":22037,"forks":1925},{"captured_at":"2026-10-26T20:37:03.256255Z","stars":22048,"forks":1928},{"captured_at":"2026-10-26T20:51:49.480281Z","stars":22057,"forks":1928},{"captured_at":"2026-10-26T21:06:52.440442Z","stars":22068,"forks":1928},{"captured_at":"2026-10-26T21:21:54.600501Z","stars":22078,"forks":1929},{"captured_at":"2026-10-26T21:36:58.504279Z","stars":22086,"forks":1929},{"captured_at":"2026-10-26T21:51:57.441216Z","stars":22097,"forks":1929},{"captured_at":"2026-10-26T22:06:52.345573Z","stars":22106,"forks":1931},{"captured_at":"2026-10-26T22:21:48.639743Z","stars":22113,"forks":1931},{"captured_at":"2026-10-26T22:36:53.674624Z","stars":22123,"forks":1932},{"captured_at":"2026-10-26T22:51:52.702799Z","stars":22128,"forks":1932},{"captured_at":"2026-10-26T23:06:56.768682Z","stars":22133,"forks":1933},{"captured_at":"2026-10-26T23:21:59.140460Z","stars":22141,"forks":1935},{"captured_at":"2026-10-26T23:36:51.914192Z","stars":22148,"forks":1936},{"captured_at":"2026-10-26T23:51:52.895046Z","stars":22161,"forks":1936},{"captured_at":"2026-10-27T00:07:07.039949Z","stars":22165,"forks":1936},{"captured_at":"2026-10-27T00:21:54.289830Z","stars":22170,"forks":1936}]}}