SkillSpector
未认领Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
agent-securityagent-skillsagentic-aiai-securityclaude-codemcpprompt-injectionsecurity-scannersecurity-toolssecurity-workflowsupply-chain-security
安装
$
docker run --rm -v "$PWD:/scan" skillspector scan ./my-skill/ --no-llm