SkillSpector is a security scanner for detecting vulnerabilities, malicious patterns, and security risks in AI agent skills. It analyzes skills used by AI agents, such as Claude Code, Codex CLI, and Gemini CLI, which often execute with implicit trust and minimal vetting. In a subset of 31,132 analyzed skills, 26.1% contained vulnerabilities and 5.2% showed likely malicious intent. SkillSpector helps users determine if a skill is safe to install and is part of the NVIDIA Verified Skills pipeline, which scans and evaluates skills before publication. It supports multi-format input and detects 71 vulnerability patterns across 17 categories, including prompt injection, data exfiltration, and privilege escalation.