NVIDIA/SkillSpector
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
20.2k stars · 1.8k forks · Python
Healthy
Healthy: actively maintained by 21 people, no known risks.
Why
No rule fired.
What would change this
- Partly checked: maintenance (Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.; Authors in the last 90 days are counted from the sampled commits only.; Most commits in the last year come from bots.)
- A dormant maintenance status, a deprecated or archived package, a successor link, or a critical advisory would change this.
Maintenance
PartialActive
- Human commits, 30 days
- 367
- Human commits, 90 days
- 443
- Human commits, 365 days
- 570
- Bot share of commits, 365 days
- 56%
- Last commit
- Oct 14, 2026 (19 hours ago)
- Last human commit
- Oct 14, 2026 (19 hours ago)
- Authors, 90 days
- 21
- Last release
- Sep 23, 2026 (21 days ago)
- Median PR merge time
- 28 hours
Responsiveness: of 26 recent issues, 100% got a maintainer reply. Median first response: 9 days.
- Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.
- Authors in the last 90 days are counted from the sampled commits only.
- Most commits in the last year come from bots.
Sources: Commits, Releases, Merged pull requests, Issues
People
Complete- Owner
- Organization
- Commits sampled
- 221 since Oct 14, 2025
- Authors for half of commits
- 2
- Authors for 80% of commits
- 4
- Contributors
- 102
Top committers
- rng1995: 41% of commits
- yashrajp22: 33% of commits
- YMuskrat: 5% of commits
- chrisknvidia: 3% of commits
- efegokdemir: 3% of commits
- Shares come from the newest sampled commits, since the commit sample is capped.
Sources: Commits, Contributors
Stars
CompleteOrganic, confidence high
Bursts
- May 30, 2026 to Jul 10, 2026: about 12.6k more stars than usual, peak 986 in one day, a spike that tapers off. Outside explanation: a Hacker News post, a jump in forks, a jump in issues and pull requests.
- Aug 30, 2026 to Sep 14, 2026: about 1.4k more stars than usual, peak 224 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests, a new release.
- 2 stars GitHub has since removed (tracked since Oct 14, 2026).
Anyone can buy stars for any repo; bursts alone don't prove the owner did.
- The star history looks organic.
Sources: How star history is analyzed
Risk
CompleteFlags
No risk flags.
License
- Now
- Apache-2.0 (OSI-approved)
- A year ago
- Not known
Packages
No published packages found.
Sources: GitHub: NVIDIA/SkillSpector
Badge
Add this to a README to show the current verdict:
[](https://reporadar.ai/NVIDIA/SkillSpector)Earlier verdicts
- Oct 14, 2026: Healthy
- Oct 14, 2026: Healthy