Building an Advanced AI Skill Security Auditing Pipeline with NVIDIA SkillSpector, LangGraph, YARA Rules, SARIF, and CI Policy Gates
MarkTechPost 2 months ago 27
NVIDIA SkillSpector is a security auditing tool that scans AI agent skills for vulnerabilities using LangGraph, YARA rules, and SARIF reports. The tutorial demonstrates scanning four synthetic skills—pdf-summarizer, repo-janitor, invoice-sync, and notes-mcp—with risk scores ranging from clean to malicious, including detection of embedded credential theft, command injection, and unapproved telemetry beacons. Results enable teams to suppress baseline findings, detect regressions, enforce CI security gates, and visualize fleet-wide risk distribution before deployment.