NVIDIA: Are these AI skills actually safe to use? #ai #security #nvidia

Added: 2026-06-07

[00:00:00]I scanned three AI skills with NVIDIA's new security tool.

[00:00:03]Every single one came back 100 out of 100 critical.

[00:00:08]Let me show you what this tool actually is.

[00:00:11]First, why it exists.

[00:00:13]NVIDIA found that 26% of AI skills contained vulnerabilities.

[00:00:17]5% look outright malicious.

[00:00:20]And these skills get real access to your machine.

[00:00:23]This is Skill Specter.

[00:00:24]It's open source from NVIDIA.

[00:00:27]Before you install a skill, it scans every file inside it.

[00:00:30]The instructions, the helper scripts, the config.

[00:00:33]It checks them against 64 known attack patterns grouped into 16 categories.

[00:00:39]Everything from supply chain risks to tool misuse and data leaks.

[00:00:43]Here's the dangerous stuff it looks for.

[00:00:45]Prompt injection.

[00:00:47]Data theft.

[00:00:48]Privilege escalation.

[00:00:50]Supply chain risks.

[00:00:52]Hidden code execution.

[00:00:53]And skills that grab far more access than they need. Using it is three steps.

[00:00:58]Install it once.

[00:01:00]Point it at a skill, a folder, a repo, a zip, or URL.

[00:01:04]Then it scores the whole thing and tells you what to do.

[00:01:07]The command is simple.

[00:01:09]Skill Specter scan, then the path.

[00:01:11]You get a report in your terminal or as markdown or JSON.

[00:01:15]Now, the real results.

[00:01:16]First, the Arkon skill.

[00:01:18]19 separate findings.

[00:01:20]Four of them high severity.

[00:01:22]A risk score of 100, then two more.

[00:01:25]Agent Browser, which ships real shell scripts.

[00:01:28]And a brainstorming skill from the official marketplace.

[00:01:31]Both also scored 100, but here's the honest part.

[00:01:34]Most of these were patterns in docs and helper scripts.

[00:01:37]Not proof of a real exploit.

[00:01:39]It's a static scan.

[00:01:41]A strong signal, not a final verdict.

[00:01:44]So, I'm curious.

[00:01:45]Three skills, including an official one, all scored 100. A real warning or is the scanner too strict? Tell me below.