SKILLS & PROMPTING · 27 OCTOBER 2026
NVIDIA SkillSpector: scan skills before you install them
NVIDIA's open-source SkillSpector checks skills for Claude Code, Codex, Gemini CLI and MCP servers, combining rule-based checks, an optional AI review and known-vulnerability lookups into a risk score. In a research study of 31,132 public skills referenced alongside it, 26.1% had at least one vulnerability and 5.2% looked likely to be malicious (the researchers' own figures).
Why it mattersSkills are instructions and code that run with your permissions. Scan, and read, any third-party skill before installing it on a machine that holds client data.
Sources
Related AI tools
How we knowCompany figures are labelled as their own claims; anything we couldn't verify is labelled as a report or a claim.
MORE FROM 27 OCTOBER 2026
- Anthropic files to go public, with its first operating profit (not a net profit)
- OpenAI's GPT-6.1 Terra: a cheaper, faster model that can use your screen
- Cohere catches an open model trying to 'phone home' from a sandbox
- OpenAI says its models produced new results in maths, computer science and physics
- Rumour roundup (none of it confirmed)
- Cursor's Agent SDK is now generally available: agents as code, with tests