NVIDIA open-sources SkillSpector, a security scanner designed to detect vulnerabilities and malicious patterns in AI agent skills.

// 1h agoOPENSOURCE RELEASE

NVIDIA open-sources SkillSpector, a security scanner designed to detect vulnerabilities and malicious patterns in AI agent skills.

NVIDIA has released SkillSpector, an open-source security tool designed to scan and analyze AI agent skill bundles for security vulnerabilities and malicious behavior. Built for AI developers and agent environments, SkillSpector scans instruction sets to detect issues such as prompt injections, tool poisoning, and excessive agency before they are loaded or executed, helping secure modular AI agent workflows.

// ANALYSIS

Securing portable skills is the next major frontier in AI safety as modular agent architectures go mainstream, and NVIDIA's tooling targets a critical weak point where untrusted code/instructions execute with high privileges.

–Prompt injection and tool poisoning are hard to mitigate statically, making pre-execution scanning of skill bundles essential for multi-agent systems.
–As developers increasingly deploy agents with direct tool access, tools like SkillSpector will become standard parts of secure CI/CD pipelines for AI.
–By open-sourcing this tool, NVIDIA positions itself at the core of enterprise AI agent governance and runtime security.

// TAGS

securitysafetyai-agentsopen-sourcepythonnvidia

DISCOVERED

1h ago

2026-06-11

PUBLISHED

1h ago

2026-06-11

RELEVANCE

8/ 10

// KEEP READING

More AI developer news from the feed

EXPLORE FULL FEED

OPEN SOURCE23m ago

Cognition open-sources Devin for Terminal /handoff

Cognition has open-sourced /handoff, a core command within the Devin CLI that allows developers to seamlessly migrate their local coding environment, including workspace context and git state, to a cloud-based Devin agent. This functionality enables developers to offload compute-heavy or long-running tasks, such as running complex test suites or refactoring, to an isolated virtual machine in the cloud, allowing them to close their laptops while the background agent continues working independently.

UPDATE1h ago

Google issues Gemini CLI migration reminder

Google is reminding Gemini CLI users on Google One or free tiers to migrate to the new Go-based Antigravity CLI before the June 18, 2026, deadline. The team is soliciting feedback on migration friction points and gaps to ease the transition.

UPDATE1h ago

Notebooks in Gemini expands to Europe, UK

Google has officially expanded the regional availability of Notebooks in Gemini to the European Economic Area (EEA), the United Kingdom, and Switzerland. This feature enables subscribers to create persistent, structured project workspaces containing custom instructions, conversation histories, and uploaded source documents, bridging the gap between standard chat interfaces and cohesive knowledge-management tools.