{
  "schema_version": "1.1",
  "id": "archive:https://github.com/NVIDIA/SkillSpector",
  "slug": "skillspector-1o8ny3i",
  "url": "https://feed7.dev/p/skillspector-1o8ny3i",
  "title": "NVIDIA/SkillSpector",
  "why_included": "SkillSpector scans agent skills for security risks before installation, with static checks, optional LLM analysis, and reports that can feed CI. Its cited research subset found vulnerabilities in 26.1% of skills.",
  "summary": "SkillSpector checks skills from repositories, URLs, archives, directories, or files using **71 vulnerability patterns across 17 categories**. It combines static analysis with optional LLM review and can emit SARIF, JSON, Markdown, or terminal reports. The cited dataset subset contained 31,132 skills; **26.1% had vulnerabilities** and 5.2% showed likely malicious intent.\nAdd a scan before installing third-party skills, or use SARIF and `--fail-on-incomplete` to support CI gates. Baselines can suppress findings already reviewed so later scans surface new ones.\nA scanner report is a review aid, not proof a skill is safe. Findings can be suppressed, and caller exclusions make coverage partial and prevent a SAFE recommendation. LLM analysis is optional and requires provider configuration.",
  "practical_implication": "",
  "agent_context": "SkillSpector checks skills from repositories, URLs, archives, directories, or files using **71 vulnerability patterns across 17 categories**. It combines static analysis with optional LLM review and can emit SARIF, JSON, Markdown, or terminal reports. The cited dataset subset contained 31,132 skills; **26.1% had vulnerabilities** and 5.2% showed likely malicious intent.\nAdd a scan before installing third-party skills, or use SARIF and `--fail-on-incomplete` to support CI gates. Baselines can suppress findings already reviewed so later scans surface new ones.\nA scanner report is a review aid, not proof a skill is safe. Findings can be suppressed, and caller exclusions make coverage partial and prevent a SAFE recommendation. LLM analysis is optional and requires provider configuration.",
  "source": {
    "name": "GitHub",
    "url": "https://github.com/NVIDIA/SkillSpector",
    "published_at": null
  },
  "source_class": "tool",
  "content_type": "GitHub Repo",
  "layer": "tools",
  "domains": [
    "coding",
    "security"
  ],
  "topics": [
    "skills",
    "tool-use"
  ],
  "verification": {
    "status": "needs_review",
    "label": "Needs Review",
    "method": "unverified",
    "verified_at": null
  },
  "uncertainty": [],
  "connected_context": {
    "meaning": "This makes third-party skill review a repeatable scanning step, with CI output and baselines to track newly surfaced findings. Its dataset figures give scale to the exposure concern, while the caveats matter operationally: a clean report is not a safety guarantee, and exclusions can leave coverage incomplete.",
    "corpus_size": 910,
    "generated_at": "2026-10-26T11:00:55.610Z",
    "connections": [
      {
        "title": "We Vetted 2000 AI Skills Before They Reached Developers — Lucas Palma, Nubank",
        "source_name": "AI Engineer",
        "source_url": "https://www.youtube.com/watch?v=iKQ78wyJEXU",
        "feed7_url": "https://feed7.dev/p/we-vetted-2000-ai-skills-before-they-reached-developers-lucas-palma-nuba-0k4ehkz",
        "reason": "Both treat skills as supply-chain dependencies and describe scanning in operational workflows; SkillSpector adds concrete scan inputs, report formats, baselines, and an explicit limit on what a clean result proves."
      },
      {
        "title": "anthropics/claude-plugins-community",
        "source_name": "GitHub",
        "source_url": "https://github.com/anthropics/claude-plugins-community",
        "feed7_url": "https://feed7.dev/p/claude-plugins-community-0vhi4d8",
        "reason": "The reviewed plugin mirror screens entries before distribution, while SkillSpector offers a scanner teams can use for their own review; scanning alone does not establish the mirror's unspecified review criteria or behavioral guarantees."
      },
      {
        "title": "VoltAgent/awesome-agent-skills",
        "source_name": "GitHub",
        "source_url": "https://github.com/VoltAgent/awesome-agent-skills",
        "feed7_url": "https://feed7.dev/p/awesome-agent-skills-0vfknie",
        "reason": "The discovery index makes selective adoption important, and SkillSpector supplies a way to inspect candidate skills before installing them; neither catalog inclusion nor scan results replace broader evaluation."
      },
      {
        "title": "zhaoxuya520/reverse-skill",
        "source_name": "GitHub",
        "source_url": "https://github.com/zhaoxuya520/reverse-skill",
        "feed7_url": "https://feed7.dev/p/reverse-skill-1e4jlfw",
        "reason": "The security router's broad skill-pack concern is directly addressed by independent scanning, while its authorization and evidence workflow covers risks a static or optional LLM scan cannot resolve."
      }
    ]
  },
  "lifecycle": "Current",
  "published_at": null,
  "modified_at": null,
  "supersedes": [],
  "expires_at": null,
  "formats": {
    "html": "https://feed7.dev/p/skillspector-1o8ny3i",
    "json": "https://feed7.dev/p/skillspector-1o8ny3i.json",
    "markdown": "https://feed7.dev/p/skillspector-1o8ny3i.md"
  }
}