A clearer view of AI.
THE INDEPENDENT AI.

CODING AGENT / DEV TOOL · WORTH A LOOK

SkillSpector (NVIDIA)

NVIDIA's open-source scanner for AI agent skills (Claude Code, Codex, Gemini CLI and MCP skills).

Visit github.com ↗

What SkillSpector (NVIDIA) does

NVIDIA's open-source scanner for AI agent skills (Claude Code, Codex, Gemini CLI and MCP skills). Scans a Git repo, URL, zip, folder or single file with static checks for attack patterns (prompt injection, data theft, privilege escalation, poisoned MCP tools) plus optional LLM review and OSV.dev CVE lookups, and gives a risk score with a recommendation. Its research dataset of 31,132 unique marketplace skills found 26.1% with at least one vulnerability and 5.2% showing likely malicious intent.

Good for

  • Scan any third-party skill pack before installing it into Claude Code or Codex
  • Add a skill-security check to your team's onboarding for shared skills

Try this in 10 minutes

  1. Scan any third-party skill pack before installing it into Claude Code or Codex. Use the free version: pick one real example from your own business and try just that.
  2. Add a skill-security check to your team's onboarding for shared skills. Put the result next to how you do it today. Is it faster, cheaper or better?
  3. Sign up (free plan or trial if available) and try it on one real task from this week.

Mini-tasks based on common small-business uses for this tool.

Honest take

Some claims not independently checked

  • Fact or hype verdict on NVIDIA: Nemotron 3.5 Transcribe demo clip: a demo, not a tutorial, with no testable takeaways in the video itself. The visible diarization slips are a useful reminder to check speaker labels and names in any AI transcript. For what the model does, see the model card: https://huggingface.co/nvidia/NVIDIA-Nemotron-3.5-Transcribe-30B-A4B (open weights, OpenMDW-1.1 licence, 40 languages for transcription, recordings up to one hour, offline/recorded audio rather than live; leaderboard positions are NVIDIA's own claims). Source video

What we couldn’t verify

  • Fact vs hype: tool and dataset figures verified on github.com/NVIDIA/SkillSpector and NVIDIA docs; the 26.1%/5.2% figures come from a research study (arXiv 2601.10338), 'vulnerability' is broad.
  • The X post that surfaced it is a hype-style account.

Pricing

Free, open source (Apache-2.0 per posts; check repo). Optional LLM review uses your own model API.

Prices as listed by the maker when we last checked (2026-10-27); usually in US dollars. Check the website for current prices.

Latest update

  • 2026-10-25: Highlighted on X as a way to vet agent skills before install; NVIDIA docs page 'Scan Agent Skills Before Installation'.

Is SkillSpector (NVIDIA) worth it? Quick answers

Is SkillSpector (NVIDIA) worth it?

SkillSpector (NVIDIA) is worth a look if it matches a job you already do (Coding agent / dev tool). It is free or open source, so the main cost is your time to set it up. Some of the maker's claims have not been independently checked.

How much does SkillSpector (NVIDIA) cost?

Free, open source (Apache-2.0 per posts; check repo). Optional LLM review uses your own model API.

What is SkillSpector (NVIDIA) used for?

NVIDIA's open-source scanner for AI agent skills (Claude Code, Codex, Gemini CLI and MCP skills). Typical uses: scan any third-party skill pack before installing it into Claude Code or Codex; add a skill-security check to your team's onboarding for shared skills.