SkillSpector Docker & Self-Hosted Deployment

GitHub

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain...

14,311 stars Python Python 1 file · ~29,255 tokens #agent-security#agent-skills#agentic-ai#ai-security#claude-code#mcp#prompt-injection#security-scanner
1. Pull Image (DOCKERHUB) docker pull NVIDIA/SkillSpector:latest
2. Docker Run (1-Click Launch) docker run -d --name skillspector --restart always nvidia/skillspector:latest
3. Podman Run podman run -d --name skillspector --restart always nvidia/skillspector:latest
4. Skopeo Inspect (Zero-Pull Manifest) skopeo inspect docker://docker.io/nvidia/skillspector:latest
5. ORAS Pull (OCI Artifact) oras pull nvidia/skillspector:latest
Dockerfile 
FROM python:3.12-slim-bookworm@sha256:8a7e7cc04fd3e2bd787f7f24e22d5d119aa590d429b50c95dfe12b3abe52f48b AS builder

WORKDIR /app
COPY pyproject.toml README.md ./
COPY src/ src/
RUN python -m venv .venv
RUN .venv/bin/pip install --no-cache-dir .

FROM python:3.12-slim-bookworm@sha256:8a7e7cc04fd3e2bd787f7f24e22d5d119aa590d429b50c95dfe12b3abe52f48b

RUN apt-get update \
    && apt-get install --no-install-recommends -y git ca-certificates \
    && rm -rf /var/lib/apt/lists/*

COPY --from=builder /app/.venv /app/.venv

ENV PATH="/app/.venv/bin:$PATH"
WORKDIR /scan

ENTRYPOINT ["skillspector"]