What it does
SkillSpector is a security scanner for AI agent skills. It checks a skill for vulnerabilities, malicious patterns, prompt injection, data exfiltration and supply-chain risks before you install it. It works with skills for Claude Code, Codex and MCP.
Use cases
- 01Scan a downloaded skill before adding it to Claude Code
- 02Review third-party skills as part of an install approval
- 03Check a skill for hidden data exfiltration or prompt injection