skill-security-scan

Project overview

NVIDIA SkillSpector examines Git repositories, URLs, archives, directories, or individual files before an agent skill is installed. It checks dozens of patterns spanning prompt injection, exfiltration, privilege escalation, dangerous code, dependency vulnerabilities, MCP least privilege, and tool poisoning, then produces terminal, JSON, Markdown, or SARIF reports with risk scores. Scanned skills are never executed. Optional LLM analysis sends file contents to the configured provider, while static-only mode keeps that content local.

Project overview

Snyk Agent Scan finds MCP configurations and Agent Skills used by tools such as Claude, Cursor, Windsurf, and Gemini CLI, then checks for prompt injection, tool poisoning, tool shadowing, malicious payloads, unsafe credential handling, and hardcoded secrets. It runs directly through uvx. Scanning a stdio MCP server executes its configured command, so review the command and approve it only through the consent prompt.