NVIDIA SkillSpector: Should You Scan Your AI Agent Skills Before Installing Them?

If you have been using Claude Code, Codex CLI, Gemini CLI, or any agent framework that supports "skills," you have probably installed a few skills from a marketplace or a random GitHub repo without reading every line of code inside them. Most people do. The skill promises to help with PDF generation, data analysis, or some other task, you drop it into your project, and you move on. NVIDIA's new open source tool, SkillSpector, exists because that habit is riskier than it looks. This article walk...