NVIDIA open-sources SkillSpector to scan agent skills for secret leaks
dr_cintas · x · 2026-07-23
NVIDIA has open-sourced SkillSpector, a security tool for agent skills.
The point is to inspect “skills” before they run: these skills are executable code and can access the same environment as the user, which means a convenient skill could also read env vars and leak API keys. SkillSpector is aimed at catching that class of risk for ecosystems like Claude Code, Codex, and Gemini.
Related event: NVIDIA Open-Sources SkillSpector for AI Agent Security(3 posts)→
More from coding & agent
- Drex Search cuts agent steps 62% and tokens 56% with decision-powered retrieval — _AustinCalvert_ · 2026-10-27
- Engineer's real numbers: 20B tokens in 4 months, agents still beat hiring by a mile — thechrisperry · 2026-10-27
- Vovy launches a cursor-following voice agent for Mac, free tier gives 100 credits/mo — Scobleizer · 2026-10-27
- Redditor seeks real-world stacks for a persistent-memory personal AI that answers texts and emails — BrooksomidusGG · 2026-10-27
- Practical tip: use max effort for planning, xhigh for implementation in Claude Code — majidmanzarpour · 2026-10-27
- Chrome team explains WebMCP: agents get tools from your website, not a replacement for MCP — rseroter · 2026-10-27