NVIDIA open-sources SkillSpector to scan agent skills for secret leaks

dr_cintas · x · 2026-07-23

NVIDIA has open-sourced SkillSpector, a security tool for agent skills.

The point is to inspect “skills” before they run: these skills are executable code and can access the same environment as the user, which means a convenient skill could also read env vars and leak API keys. SkillSpector is aimed at catching that class of risk for ecosystems like Claude Code, Codex, and Gemini.

Related event: NVIDIA Open-Sources SkillSpector for AI Agent Security(3 posts)→

Original post →

More from coding & agent

coding & agent channel →