SkillSpector — Vendor-Backed Security Scanner for AI Agent Skills, Well-Scoped but Dependent on Static Patterns (opens in new tab)

What It Is SkillSpector is a security scanner that analyzes AI agent skills (code/configuration bundles used by Claude, Codex, Gemini, etc.) to detect vulnerabilities before installation. It runs static analysis + optional LLM semantic checks, outputs findings in multiple formats (terminal, JSON, Markdown, SARIF), and assigns a 0–100 risk score. Who It's For Agent developers wanting to audit skills before publishing Platform operators (Anthropic, Google, etc.) vetting community skills at scal...