SkillSpector spots real threats but drowns good AI skills in false alarms
NVIDIA's open‑source SkillSpector correctly flags a deliberately malicious AI agent skill, but it also drowns a perfectly benign automation in dozens of false positives. The article shows why the scanner’s single score is unreliable and argues that human audit remains essential before shipping third‑party skills.