Registry › Compare › DvalinCode vs SkillSpector

DvalinCode vs SkillSpector

DvalinCode leads on trust: 83.9/100 (Grade A) against 63.4/100 (Grade C), a 20.5-point gap. DvalinCode leads on supply-chain integrity and provenance, and rests on broader evidence; SkillSpector leads on adoption and maintenance.

A DvalinCode 83.9

Independent security verification for code written by humans and AI agents. Scan, repair, then prove it — Dvalin runs your project's own checks and issues a Verified Fix Record anyone can re-derive offline. Local-first, policy-bound, MIT.

arthurpanhku/dvalincode · #98 overall · #2 Security & Guardrails · coverage B (3/5)

Choose DvalinCode if supply-chain integrity and provenance matter most.

+9.0Safety / Integrity: OSSF Scorecard 6.6 against 5.3
+7.2Identity / Provenance: package provenance attested, against none
+1.1Transparency: OSSF Scorecard 6.6 against 5.3
B vs CEvidence coverage: 3 of 5 independent signal types, against 2

C SkillSpector 63.4

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.

NVIDIA/SkillSpector · #528 overall · #7 Security & Guardrails · coverage C (2/5)

Choose SkillSpector if adoption and maintenance matter most.

+2.6Adoption: 18.3k GitHub stars against 118
+0.5Maintenance: last push today, against 4d ago

Where they differ

20.0

Safety / IntegrityDvalinCode +9.0

11.0

18.0

Identity / ProvenanceDvalinCode +7.2

10.8

14.1

TransparencyDvalinCode +1.1

13.0

19.5

MaintenanceSkillSpector +0.5

20.0

7.6

AdoptionSkillSpector +2.6

10.2

+4.7

Runtime calibrationDvalinCode +6.3

-1.6

Full evidence table

An independent, evidence-based trust comparison of DvalinCode and SkillSpector, two Security & Guardrails projects in the HVTracker registry. Scores come from public, checkable signals — supply-chain provenance, OSSF Scorecard, maintenance, and adoption — not popularity.

Full evidence

Signal	DvalinCodearthurpanhku/dvalincode	SkillSpectorNVIDIA/SkillSpector
HVTrust score	83.9	63.4
Evidence grade	A	C
Coverage grade	B	C
Overall rank	#98	#528
Rank in Security & Guardrails	#2	#7
GitHub stars	118	18.3k
Last updated	4d ago	today
Build provenance	Yes	No
OSSF Scorecard	6.6 / 10	5.3 / 10
License	MIT	Apache-2.0
Downloads	91/wk	—
Trust dimensions (points earned)
Safety / integrity / 25	20.0	11.0
Identity & provenance / 18	18.0	10.8
Transparency / 17	14.1	13.0
Maintenance / 20	19.5	20.0
Adoption / 20	7.6	10.2
Runtime capability surface (full matrix)
MCP server	Implemented	Implemented
External providers	1 — Anthropic	5 — Amazon Bedrock, Anthropic, Azure OpenAI, …
Requires API keys	Yes	Yes
Plugin surface	plugins	extensions
Provenance drift	Match	—

Open in the live compare tool → DvalinCode profile SkillSpector profile More Security & Guardrails →

How to read this: HVTrust (0–100) weighs supply-chain signals (provenance, OSSF Scorecard, signed commits, open license) alongside real-world adoption, scaled by an evidence-confidence factor. Grade bands: A ≥ 80, B ≥ 65, C ≥ 50, D < 50. Signals refresh daily. Full methodology v4.3 →