Normalized Telegram record
SkillSpector Adds a Security Gate for Agent Skills
NVIDIA's scanner treats installable agent instructions as executable supply-chain artifacts that require inspection before use.
Signal contract
NVIDIA's scanner treats installable agent instructions as executable supply-chain artifacts that require inspection before use. This dated record adds public evidence to the skills become portable capability layer, verification bandwidth is the scarce resource analysis and keeps the claim auditable as the underlying products and practices change. Novelty: notable. Verification: source-linked. This New Runtime record is an evidence-linked retrieval unit.
Source ledger
Publishable sources attached to this record.
| # | Source | Role | Public status |
|---|---|---|---|
| 1 | github.comrepo | primary receipt | source_urls |
Observation
NVIDIA's scanner treats installable agent instructions as executable supply-chain artifacts that require inspection before use.
Why it matters
This dated record adds public evidence to the skills become portable capability layer, verification bandwidth is the scarce resource analysis and keeps the claim auditable as the underlying products and practices change.
Entities
No named entity extracted.
Provenance
This public record is an English normalization of QWG AI Telegram message 2426. The complete original-language post remains the canonical raw message.