How NVIDIA’s Open‑Source SkillSpector Secures AI Agent Skills Before Installation
SkillSpector, NVIDIA’s open‑source AI Agent skill scanner, checks third‑party skills for malicious commands, privilege escalation, data exfiltration, supply‑chain vulnerabilities and dangerous code across multiple input sources, using 64 detection modes, a two‑stage static‑plus‑LLM analysis pipeline and risk scoring that integrates smoothly into CI/CD workflows.
