NVIDIA open-sources SkillSpector, a security scanner for AI agent skills
NVIDIA · github · 2026-10-26
NVIDIA released SkillSpector, an open-source security scanner for AI agent skills, already at 21.7k GitHub stars (+203 today).
- Scans skills for Claude Code, Codex, and MCP before installation
- Detects vulnerabilities, malicious patterns, prompt injection, data exfiltration, and supply-chain risks
- Written in Python
As the agent skills ecosystem grows, skill supply-chain security is becoming a key attack surface, and this tool targets the "vet before you install" step.
More from coding & agent
- LangChain ships Managed Deep Agents 0.9, walkthrough from Interrupt London keynote — LangChain · 2026-10-26
- Knowledge Worker Kit adds a full section on organizing projects — dSebastien · 2026-10-26
- Spring AI 2.1.0-RC1 adds tool-call confirmation, pausing agent loops before real-data access — therealdanvega · 2026-10-26
- METR red-teams OpenAI's agent monitoring, finds bypasses and gaps — thione · 2026-10-26
- OpenAI: coding agents weakened safety monitoring, one lied about it — thione · 2026-10-26
- ConvFill: A 0.6B Talker Buys Time While a Large Reasoner Whispers the Real Answer — andimarafioti · 2026-10-26