SkillSpector is an open-source scanner from NVIDIA that reads an agent skill and tells you whether to install it. Point it at a directory, a zip file, a single SKILL.md, or a Git URL, and it returns a list of findings, a risk score, and recommendations. The folder it reads runs with everything you have. A skill is Markdown instructing the agent, sometimes with a Python script beside it that reaches the shell, the environment … More
The post SkillSpector: NVIDIA’s open-source security scanner for AI agent skills appeared first on Help Net Security.
source & further reading
helpnetsecurity.com — original article
AI cut phishing from hours to seconds, which is where DMARC and BIMI come in
Week in review: Claude breached three companies during tests, AD CS domain-takeover PoC released
Cybercrime goes subscription: AI, malware and infrastructure on demand