# NVIDIA/SkillSpector repository brief

> This is an EasyGlobe-authored bilingual repository brief, not a redistributed third-party Skill and not an installable copy of the repository. Review the upstream repository before use.

## English

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them

EasyGlobe verified this public, non-fork, non-archived repository at commit `c94b50a6f51f7acaed688330d748e411042ef861`. The sampled tree contains 24 `SKILL.md` files and at least one sampled file has valid `name` and `description` frontmatter. Its primary directory category is Security. Static sampling did not find the high-risk credential-exfiltration or destructive-root-delete patterns checked by the research pipeline; this is not a full security audit.

## 中文

NVIDIA/SkillSpector 是一个面向安全工作流的 GitHub Skill 仓库。EasyGlobe 在提交 `c94b50a6f51f7acaed688330d748e411042ef861` 对公开、非 fork、未归档的默认分支进行了抽样核验：仓库树包含 24 个 `SKILL.md` 文件，且至少一个抽样文件具有有效的 `name` 与 `description` frontmatter。静态抽样未命中本流水线检查的凭据外传或根目录破坏性命令模式；这不等同于完整安全审计，使用前仍应检查上游仓库。

## Repository metadata

| Field | Value |
| --- | --- |
| Repository | [NVIDIA/SkillSpector](https://github.com/NVIDIA/SkillSpector) |
| Hot rank / score | 14 / 54.72 |
| Stars at verification | 14830 |
| Default branch | `main` |
| Sampled commit | `c94b50a6f51f7acaed688330d748e411042ef861` |
| Last push | 2026-08-21T01:21:11Z |
| Verified | 2026-08-21T03:25:24.715Z |
| License | Apache-2.0 |
| SKILL.md paths in sampled tree | 24 |

## Representative valid Skill evidence

| Path | Frontmatter name | Frontmatter description | SHA-256 |
| --- | --- | --- | --- |
| `skills/skill-inspector/SKILL.md` | skill-inspector | Review AI agent skills before installation using NVIDIA SkillSpector and source-aware semantic review. Use when asked whether a skill or downloaded skill folder is safe, trustworthy, installable, over-permissioned, or malicious. | `89ab1550769752ffbad782ee63fee3c345d546bded672adaac5fd03d2941aa84` |
| `tests/fixtures/malicious_skill/SKILL.md` | chef-assistant | Use when cooking or planning meals, troubleshooting recipes, learning culinary techniques | `2c81411e289f087868c94563cdfab4740af3af1a73e6d3437b034285d61a9041` |
| `tests/fixtures/mcp_clean_skill/SKILL.md` | code-formatter | Formats Python code using the black formatter | `e128baaf75dbffee54e004c34ed294073e1ca17366fe854c949a3bc4fcd42578` |
| `tests/fixtures/mcp_mismatched_skill/SKILL.md` | friendly-greeter | A friendly greeting skill that says hello to users | `4f197e2b9fb503c7e16ea67ad62e0b9e960d6b8b4ae866b385cffcc90807e24e` |
| `tests/fixtures/mcp_overprivileged_skill/SKILL.md` | over-privileged-helper | A simple file reader utility | `7aa71c52caff7163c677b68a904a672456750c25cedfe11ecf38ad2b2b7daf07` |

Source: https://github.com/NVIDIA/SkillSpector