NVIDIA/SkillSpector vs promptfoo/promptfoo
Compare NVIDIA/SkillSpector and promptfoo/promptfoo using the current verified snapshot: positioning, license, deployment, use cases, limitations, and original sources.
NVIDIA/SkillSpector
SkillSpector performs static security analysis of AI agent skills from Git repos, URLs, archives, directories, or individual files to detect vulnerabilities and malicious patterns before installation. It offers optional LLM-based semantic evaluation, live OSV.dev vulnerability lookups, and 0-100 risk scoring.
- License
- Apache-2.0
- Deployment
- Refer to project documentation
- Use cases
- Coding & Development
- Updated
- —
promptfoo/promptfoo
promptfoo is a developer-first library and CLI for declarative testing, automated evaluation, and vulnerability scanning of LLM prompts, agents, and retrieval pipelines. It supports local orchestration and integrates with multiple LLM providers, including remote APIs and local runtimes.
- License
- MIT
- Deployment
- Refer to project documentation
- Use cases
- Developers, AI engineers, and operations teams who need to evaluate prompts, test models, and automate security checks via a CLI or library.
- Updated
- 2026-07-16T18:26:38Z
How to choose
First eliminate options that fail required deployment, license, or use-case constraints; then inspect each detail page for limitations and direct evidence.