vibehacker
News

More news

View all

NVIDIA SkillSpector: scan agent skills for 71 vuln patterns before install

NVIDIA’s Apache 2.0 SkillSpector checks Claude Code, Codex, and Gemini skills (plus MCP) for prompt injection, exfil, supply chain, and tool poisoning risks—71 patterns across 17 categories, with optional LLM analysis and an MCP scan skill install gate. A 31k skill study found 26.1% vulnerable; install via uv tool install 'skillspector[mcp] @ git+https://github.com/NVIDIA/skillspector.git'…

NVIDIA / GitHub

Spotted something we missed? Start a thread.