SkillSpector: NVIDIA’s open-source security scanner for AI agent skills

NVIDIA released SkillSpector, an open-source security scanner that analyzes AI agent skills and returns a risk score, findings, and recommendations before installation. The tool accepts a directory, zip file, SKILL.md, or Git URL, and is designed to mitigate risks from skills that execute with full user privileges.

SkillSpector is an open-source scanner from NVIDIA that reads an agent skill and tells you whether to install it. Point it at a directory, a zip file, a single SKILL.md, or a Git URL, and it returns a list of findings, a risk score, and recommendations. The folder it reads runs with everything you have. A skill is Markdown instructing the agent, sometimes with a Python script beside it that reaches the shell, the environment … More https://www.helpnetsecurity.com/2026/08/03/skillspector-open-source-agent-skill-security-scanner/ The post SkillSpector: NVIDIA’s open-source security scanner for AI agent skills https://www.helpnetsecurity.com/2026/08/03/skillspector-open-source-agent-skill-security-scanner/ appeared first on Help Net Security https://www.helpnetsecurity.com .