NVIDIA SkillSpector
| Category | MCP gateways & scanners |
|---|---|
| Official site | github.com/NVIDIA/SkillSpector |
| Maker | NVIDIA |
| Ownership / acquisition | Not published / not yet verified |
| License model | Open source |
| License | Apache-2.0 |
| Public pricing | Free (open source) |
| Source code | NVIDIA/SkillSpector |
| Last verified |
Facts are taken from the vendor's own site, GitHub, or a linked public source. Blank means we could not confirm it, not that it does not exist. Vendors can request a correction for free.
Lab result
Not yet tested. Lab testing is in preparation. No tool on the site has a lab result yet.
Frequently asked questions
What is NVIDIA SkillSpector?
NVIDIA SkillSpector is an open-source MCP security tool (gateway or scanner) from NVIDIA, released under the Apache-2.0 license. Open-source scanner that checks AI agent skills (for Claude Code, Codex CLI, Gemini CLI and others) before you install them. It scans Git repos, URLs, zip files or folders against 71 vulnerability patterns in 17 categories, including prompt injection, data exfiltration, supply chain risks and MCP tool poisoning, with optional LLM review, a 0-100 risk score and SARIF output. It is part of NVIDIA's Verified Skills pipeline.
Is NVIDIA SkillSpector open source?
Yes. NVIDIA SkillSpector is open source under the Apache-2.0 license. Source code: github.com/NVIDIA/SkillSpector.
How much does NVIDIA SkillSpector cost?
Published pricing: Free (open source). Checked on October 29, 2026; confirm current prices on the official site.
Who makes NVIDIA SkillSpector?
NVIDIA.
What are alternatives to NVIDIA SkillSpector?
Other MCP gateways and scanners listed here include Snyk Agent Scan (formerly mcp-scan), Docker MCP Gateway, Microsoft MCP Gateway, ContextForge MCP Gateway and Lasso MCP Gateway. See all 17 in MCP gateways & scanners.