SkillSpector
SkillSpector is a security scanner that checks AI agent skills for risks like prompt injection and data theft before you install them.
What it is good for
- Checking whether an AI agent skill is safe before installing it
- Spotting hidden prompt injection in downloaded agent instructions
- Scanning a batch of agent skills for security problems
- Reviewing security scan results in a report for a team
At a glance
- Who it is for
- Setup
- Guided command-line setup
Level 4 of 5. You copy and paste commands into a terminal by following the instructions. Comfortable territory for vibe coders.
- Cost
- Free and open source
- Type
- Agent app
- Tasks
- Works with
- Claude Code, Codex CLI, Gemini CLI, MCP
Momentum
- Rank this week
- #69
- Best rank
- #69 week 44, 2026
- Stars gained last week
- +2,299
- GitHub stars
- 23,926
GitHub numbers as of Nov 2, 2026. Updated weekly.
Ranking history
Official links
Setup steps are on the official pages. We do not repeat them here, since they change.
Questions
- Is SkillSpector free?
- Yes. It is free and open source (Apache-2.0 license).
- Do I need to know how to code to use SkillSpector?
- You do not need to write code, but setup means copying and pasting commands into a terminal by following its instructions.
- What does SkillSpector work with?
- According to its own documentation, it works with Claude Code, Codex CLI, Gemini CLI, and MCP.
- What is SkillSpector good for?
- Checking whether an AI agent skill is safe before installing it, spotting hidden prompt injection in downloaded agent instructions, scanning a batch of agent skills for security problems, and reviewing security scan results in a report for a team.
Similar agents
- rtk
rtk is a command-line proxy that shrinks the output of developer commands before an AI coding agent reads it, to cut token costs.
- goose
goose is an agent app that runs on your computer and handles coding, research, writing, and automation tasks for developers and power users.
- herdr
herdr is a terminal app that keeps your coding agents running in the background and shows which ones need your answer for developers running several coding agents.
- Reasonix
Reasonix is a coding agent that reads a project, edits files and runs tests for developers working in a terminal, desktop app, browser or editor.
- OpenClaude
OpenClaude is a terminal coding agent that runs on many cloud and local model providers for developers who want one workflow.
- cua
Cua is a set of tools that gives AI agents full desktops they can operate for people who need work done on their computer.