DSH PluginsSkill
skills
anthropics
Public repository for Agent Skills
Structure check pending
agent-skills
Back to Marketplace
DSH PluginsSkill
SkillSpector
NVIDIA/SkillSpector
SkillSpector is a tool for DeepSeek Harness. Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
- Stars
- 17k
- Forks
- 1.4k
- Issues
- 131
- Update
- 49 days
REVIEW SCORECARD
Review Scorecard
8.4/10Good
License compliance9.0
Engineering quality9.0
Content completeness8.0
Repository scale7.0
Maintenance activity8.0
✓ No risk detected · Automated scan results are for reference only, not an official endorsement
AI DEEP REVIEW
Worth AI Review
8.0/10Recommended
NVIDIA's actively maintained security scanner fills a real gap by vetting AI agent skills before installation.
Code quality8
README documents a Makefile-based build with uv/pip, dev dependencies, Docker support, and a DEVELOPMENT.md covering architecture and analyzer pipeline extension.
Security7
The tool itself is a security scanner with fail-closed resource bounds, ingest caps against zip bombs, and OpenSSF Scorecard badge, though it downloads third-party OSS and optionally sends code to LLM providers.
Utility9
Addresses a concrete, common pain point by scanning skills for 71 vulnerability patterns across 17 categories before install, with cited research that 26.1% of skills contain vulnerabilities.
Maintenance8
Last updated 2026-09-12, not archived, 16,992 stars, and part of NVIDIA's Verified Skills pipeline with an active skills catalog.
Documentation8
README provides install commands for uv, source, and Docker, plus usage examples, size limits, and links to hosted scanning guides, DEVELOPMENT.md, and suppression docs.
Generated by AI after reading the project README — a decision aid, not an endorsement. Neutral scores are given when information is limited.
PROJECT READMEREADMEExpandCollapse
Loading GitHub README...
The GitHub README is temporarily unavailable. Please try again later.
Open repositoryINSTALL REFERENCE
Install reference
uv tool install git+https://github.com/NVIDIA/skillspector.gitThis command was extracted from an explicit README install reference and is display-only; the DSH host will not execute it automatically.
PROJECT TOPICS
Project topics
VALIDATION LADDER
Validation progress
01Store discoveryPassed
02ClassificationPassed
03Structure checkPending
04Sandbox validationPending
FAQ
Frequently Asked Questions
What is SkillSpector used for?
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
How popular is SkillSpector?
SkillSpector has 16,992 stars and 1,446 forks on GitHub, last updated 2026-09-12.
What license does SkillSpector use?
SkillSpector is distributed under the Apache-2.0 license.
Is SkillSpector compatible with DeepSeek Harness?
SkillSpector is listed in the DSH Universe directory as a tool for DeepSeek Harness. This plugin is listed in the DSH Universe directory and covered by its validation pipeline.
CLASSIFICATION EVIDENCE
Classification evidence
Project typeSkill
Feature categoryDSH Plugins
Rule confidenceHigh
The system checks GitHub Topics against the site taxonomy and keyword rules. Current matches:agent-skills。
DSH PluginsSkill
cc-switch
farion1231
A cross-platform desktop All-in-One assistant for Claude Code, Codex, OpenCode,DeepSeek Harness and more. Only official website: ccswitch.io
Structure check pending
ai-toolsclaude-codecodexdeepseek-harness
DSH PluginsSkill
graphify
Graphify-Labs
Turn any codebase, with its docs, SQL schemas, configs, and PDFs, into a queryable knowledge graph. A /graphify skill for Claude Code, Cursor, Codex, and Gemini CLI: local deterministic AST parsing, every edge explained, no vector store.
Structure check pending
ai-agentsantigravityastclaude-code
DSH PluginsSkill
caveman
JuliusBrussee
🪨 why use many token when few token do trick — Claude Code skill that cuts 65% of tokens by talking like caveman
Structure check pending
aianthropiccavemanclaude
DSH PluginsSkill
taste-skill
Leonxlnx
Taste-Skill - gives your AI good taste. stops the AI from generating boring, generic slop
Structure check pending
agentaiclaudeclaude-code
DSH PluginsSkill
awesome-claude-skills
ComposioHQ
A curated list of awesome Claude Skills, resources, and tools for customizing Claude AI workflows
Structure check pending
agent-skillsai-agentsantigravityautomation