NVIDIA open-sources SkillSpector to scan agent skills for secret leaks
dr_cintas · x · 2026-07-23
NVIDIA has open-sourced SkillSpector, a security tool for agent skills.
The point is to inspect “skills” before they run: these skills are executable code and can access the same environment as the user, which means a convenient skill could also read env vars and leak API keys. SkillSpector is aimed at catching that class of risk for ecosystems like Claude Code, Codex, and Gemini.
Related event: NVIDIA Open-Sources SkillSpector for AI Agent Security(3 posts)→
More from coding & agent
- Same Echo Maze prompt, three frontier models: all passed visually but shipped the same hidden bug — eyishazyer · 2026-09-11
- Astra storyboards plus Minimax H3 per-shot generation boost video success rates — Hailuo_AI · 2026-09-11
- Codex tip: use Sol with Astra and Luna sub-agents to save usage — pvncher · 2026-09-11
- agents-best-practices: a provider-neutral Agent Skill for designing and auditing agentic harnesses — tom_doerr · 2026-09-11
- Cognition's SWE-2 uses a KKT duality argument in RL to shift the effort Pareto curve — YouJiacheng · 2026-09-11
- First-ever Three.js Conference lands in Paris, with a panel on AI-shortened design workflows — OdinLovis · 2026-09-11