Free download

Scan Every Skill Before You Install It

A free guide to SkillSpector by NVIDIA, the open-source scanner that checks an agent skill before you install it. Audit the skills you already have in one go, put every new skill through an install gate that refuses risky ones, and let Claude Code scan a skill over MCP before it installs it. With how to read the score, when the scan sends your files to a model, and what a scan can't tell you. Three small scripts included.

The download starts right away; the link also comes by email.

Without the newsletter box you get exactly one email with your link; the address is deleted after 7 days.

What is inside
  • audit-installed.sh Scans every skill you already have and writes a short report: allow, warn, block.
  • install-skill.sh Clones a skill to a temp folder, scans it, and installs it only if it passes.
  • scan-skill.sh One skill in, one verdict out, with exit codes for your own scripts.
  • Read the score What 0–100 means, which findings weigh most, and why you read the findings, not only the number.
  • Claude checks first SkillSpector as an MCP server plus a CLAUDE.md rule: scan, show, then install.
  • Static or LLM When the scan stays on your computer and when it sends files to a model, plus options without an API key.

macOS or Linux (Windows via WSL), Python 3.12+ and uv for SkillSpector, bash, git and python3 for the scripts. Claude Code for the MCP part. SkillSpector is free and open source (Apache-2.0); the static scan needs no account or API key. The guide is in English.

Fabian Faraz Farid · Imprint · Privacy