BREAKING
NVIDIA Open-Sources SkillSpector
0
%
skills vulnerable
0
%
show malicious intent
0
x
risk with scripts
Two-Stage Scan Pipeline
1
Input: repo, URL, ZIP or file
↓
2
Static analysis pass
↓
3
Optional LLM intent check
↓
4
Risk score 0-100
Built for Agent-Specific Threats
Specialized vs General Scanners
General Scanners
e.g. Semgrep
●
Broad code analysis
●
Not skill-aware
SkillSpector
Apache 2.0
●
Hidden instruction detection
●
Description-behavior mismatch
●
SARIF for CI/CD
Scan Skills Before You Install
AI NEWS BLITZ
NVIDIA has released SkillSpector, an open-source security scanner for AI agent skills.