SkillSpecter
A security tool designed to scan AI Skills for potential risks. It helps users detect malicious instructions, scripts, or data-leakage vulnerabilities embedded in third-party Skills before installation.
Timeline (last 90 days)
NVIDIA provides a skill security scanner called SkillSpecter, used to scan third-party skills for security risks.
Malicious or poorly crafted skills may leak API keys, sensitive data, or execute unexpected operations through an agent's tool-calling permissions.
Supply chain attacks targeting the skill/plugin layer have become a new security frontier in the agentic app store ecosystem.
All Facts (3)
NVIDIA provides a skill security scanner called SkillSpecter, used to scan third-party skills for security risks.
50%UnverifiedMalicious or poorly crafted skills may leak API keys, sensitive data, or execute unexpected operations through an agent's tool-calling permissions.
50%UnverifiedSupply chain attacks targeting the skill/plugin layer have become a new security frontier in the agentic app store ecosystem.
50%