TLDR Tech / InfoSec
SkillSpector (GitHub Repo)
NVIDIA has released SkillSpector, a security scanner for AI agent skills that combines static analysis, AST-based behavioral inspection, taint tracking, YARA signatures, and optional LLM semantic evaluation across 64 vulnerability patterns spanning prompt injection, data exfiltration, supply chain, MCP least privilege, and tool poisoning, with live OSV.dev CVE lookups and SARIF output for CI integration.
Read the full story