Before you install that AI skill someone shared on X, scan it.
In an analysis of 31,132 AI agent skills, 26.1% contained vulnerabilities and 5.2% looked malicious.
NVIDIA open-sourced SkillSpector, the scanner it uses before publishing skills to its own catalog. 20.8K stars.
โ checks 71 attack patterns across 17 categories: prompt injection, data theft, privilege escalation, poisoned MCP tools and more
โ scans a GitHub repo, a URL, a zip or a folder
โ gives each skill a 0 to 100 risk score with a clear recommendation
โ fast scan with no AI, plus an optional deeper AI review
โ works for Claude Code, Codex and Gemini CLI skills
Install:
uv tool install git+https://t.co/qDedfYSV9B
Scan a skill:
skillspector scan ./the-skill/ --no-llm
Apache-2.0.
I knew he was too close. I've seen travelers who don't know the rules and are pissed that they can't afford more space. They always take it out on the passengers and staff.
The police shooting that killed 1-year-old Kohen Wiley as he sat in his motherโs lap in a Walmart parking lot in Senatobia, Miss., in June โwas justified,โ Mississippi attorney generalโs office announced https://t.co/YZUVstINEA
1/ I caught up with a friend from high school this weekend. She was in town for her 20th Stanford reunion. She's extremely accomplished and used to be an executive at a big, well-known company, but she left to join a small startup, and it shut down. Read on >>
@destineybleu@tiffani The baiting attempts are wild, but the people I know are learning to decorate focaccia bread๐คฃ, sew, do ceramics, or pursue advanced degrees.
I saw someone say that whatโs happening in France is a psyop to get americas to riot so they can bring out martial law before midterms and itโs such an American thing to assume everything is about us ๐ god forbid the French stand up for the own rights in their own country.