Skills and MCP servers run with your coding agent's permissions and usually skip any review. NVIDIA's open-source SkillSpector (trending this week) says that in the 31,132-skill subset of its research dataset, 26.1% of skills had vulnerabilities and 5.2% showed likely malicious intent.

• Before installing: run skillspector scan <repo-or-folder> --no-llm for a fast static pass. It checks 71 patterns across 17 categories, including prompt injection, data exfiltration, MCP tool poisoning, MCP least privilege and memory poisoning. Output is terminal, JSON, Markdown or SARIF.
• Gate it: add the SARIF output to CI for any repo that ships skills or AGENTS.md files, and use a baseline so re-scans only show new findings.
• Remember: a clean scan isn't proof of safety. Still pin skill versions, read anything that asks for shell, network or credential access, and never launch agents from ~/Downloads (see the AGENTS.md hijack).