https://aitoolchain.io/tools/skillspector New releases and features in SkillSpector, tracked by The AI Toolchain. en Fri, 28 Aug 2026 07:28:43 GMT https://github.com/NVIDIA/SkillSpector/releases/tag/v2.11.0 https://github.com/NVIDIA/SkillSpector/releases/tag/v2.11.0 Fri, 28 Aug 2026 07:28:43 GMT SkillSpector v2.11.0 adds npm lockfile scanning, bundled hook findings (BH1–BH3), and LLM sampling controls via SKILLSPECTOR_TEMPERATURE and SKILLSPECTOR_SEED. • Adds `SKILLSPECTOR_TEMPERATURE` (values `0`–`1`) and `SKILLSPECTOR_SEED` (integer) environment variables for optional LLM sampling control; forwarded to OpenAI-compatible and Azure OpenAI endpoints, and left unset to preserve provider defaults. • Introduces BH1, BH2, and BH3 findings for bundled lifecycle hook execution (`hooks/hooks.json`), directly proven remote transfer of sensitive event or file content, and broad or ignored project permission surfaces (`.claude/settings.json`, `.claude/settings.local.json`). • Expands `skillspector scan --help` to list all supported hosted, local, compatible, and CLI-backed LLM providers together with their authentication paths. • Supports safe traversal of intermediate path components via `O_PATH` on Linux, allowing scans in restricted sandboxes where ancestor directories lack read permission, while preserving final-file and no-symlink protections. Breaking changes: • Existing scans may now surface new BH1, BH2, or BH3 findings for supported bundled hook and settings files (`hooks/hooks.json`, `.claude/settings.json`, `.claude/settings.local.json`); review those findings before accepting them into a baseline. https://github.com/NVIDIA/SkillSpector/releases/tag/v2.11.0 https://github.com/NVIDIA/SkillSpector/releases/tag/v2.11.0 Fri, 28 Aug 2026 07:28:43 GMT SkillSpector v2.11.0 adds npm lockfile scanning, bundled hook findings (BH1–BH3), and LLM sampling controls via SKILLSPECTOR_TEMPERATURE and SKILLSPECTOR_SEED. • Adds `SKILLSPECTOR_TEMPERATURE` (values `0`–`1`) and `SKILLSPECTOR_SEED` (integer) environment variables for optional LLM sampling control; forwarded to OpenAI-compatible and Azure OpenAI endpoints, and left unset to preserve provider defaults. • Introduces BH1, BH2, and BH3 findings for bundled lifecycle hook execution (`hooks/hooks.json`), directly proven remote transfer of sensitive event or file content, and broad or ignored project permission surfaces (`.claude/settings.json`, `.claude/settings.local.json`). • Expands `skillspector scan --help` to list all supported hosted, local, compatible, and CLI-backed LLM providers together with their authentication paths. • Supports safe traversal of intermediate path components via `O_PATH` on Linux, allowing scans in restricted sandboxes where ancestor directories lack read permission, while preserving final-file and no-symlink protections. Breaking changes: • Existing scans may now surface new BH1, BH2, or BH3 findings for supported bundled hook and settings files (`hooks/hooks.json`, `.claude/settings.json`, `.claude/settings.local.json`); review those findings before accepting them into a baseline. https://github.com/NVIDIA/SkillSpector/releases/tag/v2.10.0 https://github.com/NVIDIA/SkillSpector/releases/tag/v2.10.0 Wed, 26 Aug 2026 20:06:26 GMT SkillSpector v2.10.0 adds transitive scanning, hidden/nested artifact inspection, EA5 detection, AISOP/AISP bundle support, and two new output controls. • Adds `--transitive` flag to opt into transitive scanning of referenced skills, with `--transitive-depth`, `--transitive-allow-prefix`, and `--transitive-deny-prefix` controls for bounded traversal and source filtering. • Adds `SKILLSPECTOR_OUTPUT_LANGUAGE` environment variable to set the language of human-readable LLM-generated finding text across discovery analyzers, the meta-analyzer, and MCP tool-poisoning analysis. • Adds `risk_assessment.max_issue_severity` field to JSON/SARIF output (value `NONE` when no active issue is reported) for downstream policy gates. • Adds bounded local inspection of hidden files and ZIP-compatible nested artifacts (ZIP, DOCX, XLSX, PPTX) without extracting or executing members, raising HIGH SC9 findings for concealed executables. • Adds EA5 static findings for external model or provider selection, covering silent coding-CLI account switches and top-level model pins. • Adds structured skill summaries for valid AISOP/AISP bundles across terminal, Markdown, JSON, and SARIF output formats. • Adds dynamic analyzer discovery and validates risk-score inputs against the registered analyzer set. Breaking changes: • `langgraph-cli[inmem]` is no longer included in the base installation; LangGraph Studio users who install only the base package must now install `skillspector[langgraph-dev]` explicitly. https://github.com/NVIDIA/SkillSpector/releases/tag/v2.10.0 https://github.com/NVIDIA/SkillSpector/releases/tag/v2.10.0 Wed, 26 Aug 2026 20:06:26 GMT SkillSpector v2.10.0 adds transitive scanning, hidden/nested artifact inspection, EA5 detection, AISOP/AISP bundle support, and two new output controls. • Adds `--transitive` flag to opt into transitive scanning of referenced skills, with `--transitive-depth`, `--transitive-allow-prefix`, and `--transitive-deny-prefix` controls for bounded traversal and source filtering. • Adds `SKILLSPECTOR_OUTPUT_LANGUAGE` environment variable to set the language of human-readable LLM-generated finding text across discovery analyzers, the meta-analyzer, and MCP tool-poisoning analysis. • Adds `risk_assessment.max_issue_severity` field to JSON/SARIF output (value `NONE` when no active issue is reported) for downstream policy gates. • Adds bounded local inspection of hidden files and ZIP-compatible nested artifacts (ZIP, DOCX, XLSX, PPTX) without extracting or executing members, raising HIGH SC9 findings for concealed executables. • Adds EA5 static findings for external model or provider selection, covering silent coding-CLI account switches and top-level model pins. • Adds structured skill summaries for valid AISOP/AISP bundles across terminal, Markdown, JSON, and SARIF output formats. • Adds dynamic analyzer discovery and validates risk-score inputs against the registered analyzer set. Breaking changes: • `langgraph-cli[inmem]` is no longer included in the base installation; LangGraph Studio users who install only the base package must now install `skillspector[langgraph-dev]` explicitly. https://github.com/NVIDIA/SkillSpector/releases/tag/v2.9.5 https://github.com/NVIDIA/SkillSpector/releases/tag/v2.9.5 Sat, 15 Aug 2026 21:03:32 GMT SkillSpector v2.9.5 adds Ollama, Azure OpenAI, and OpenAI-compatible providers, opt-in `.skillspector-baseline.yaml` discovery, and deserialization detection. • Adds opt-in automatic discovery of a top-level `.skillspector-baseline.yaml` file; explicitly supplied baselines via `--baseline` remain authoritative. • Adds Ollama support for local OpenAI-compatible inference, Azure OpenAI deployment routing, and a configurable provider for other OpenAI-compatible endpoints via `SKILLSPECTOR_PROVIDER`. • Adds static analysis coverage for insecure deserialization patterns surfaced as AST10, TT6, and DS1–DS4 findings. • Uses byte offsets when mapping YARA matches back to source lines so non-ASCII content in scanned files is reported at accurate locations. • Scopes the destructive-autonomy YARA post-filter to SkillSpector's built-in rule namespace, preventing custom YARA rules that reuse a built-in rule name from being incorrectly post-filtered. https://github.com/NVIDIA/SkillSpector/releases/tag/v2.9.5 https://github.com/NVIDIA/SkillSpector/releases/tag/v2.9.5 Sat, 15 Aug 2026 21:03:32 GMT SkillSpector v2.9.5 adds Ollama, Azure OpenAI, and OpenAI-compatible providers, opt-in `.skillspector-baseline.yaml` discovery, and deserialization detection. • Adds opt-in automatic discovery of a top-level `.skillspector-baseline.yaml` file; explicitly supplied baselines via `--baseline` remain authoritative. • Adds Ollama support for local OpenAI-compatible inference, Azure OpenAI deployment routing, and a configurable provider for other OpenAI-compatible endpoints via `SKILLSPECTOR_PROVIDER`. • Adds static analysis coverage for insecure deserialization patterns surfaced as AST10, TT6, and DS1–DS4 findings. • Uses byte offsets when mapping YARA matches back to source lines so non-ASCII content in scanned files is reported at accurate locations. • Scopes the destructive-autonomy YARA post-filter to SkillSpector's built-in rule namespace, preventing custom YARA rules that reuse a built-in rule name from being incorrectly post-filtered. https://github.com/NVIDIA/SkillSpector/releases/tag/v2.9.4 https://github.com/NVIDIA/SkillSpector/releases/tag/v2.9.4 Thu, 13 Aug 2026 06:25:34 GMT SkillSpector v2.9.4 adds whitespace-padding prompt-injection detection and Python bytecode supply-chain findings (SC8). • Adds detection for whitespace-padding techniques used to conceal prompt-injection instructions inside skill content. • Adds a HIGH-severity `SC8` finding when a skill ships Python bytecode or `__pycache__` content, expanding supply-chain coverage. • Recognises `allowed-tools` as valid least-privilege permission guidance in remediations and documentation. • Ships a Skill Inspector companion skill guide. Breaking changes: • HTTP MCP clients can no longer scan local filesystem paths or supply local YARA-rule directories; use a remote repository or URL for HTTP requests, or use stdio transport for local scans. https://github.com/NVIDIA/SkillSpector/releases/tag/v2.9.4 https://github.com/NVIDIA/SkillSpector/releases/tag/v2.9.4 Thu, 13 Aug 2026 06:25:34 GMT SkillSpector v2.9.4 adds whitespace-padding prompt-injection detection and Python bytecode supply-chain findings (SC8). • Adds detection for whitespace-padding techniques used to conceal prompt-injection instructions inside skill content. • Adds a HIGH-severity `SC8` finding when a skill ships Python bytecode or `__pycache__` content, expanding supply-chain coverage. • Recognises `allowed-tools` as valid least-privilege permission guidance in remediations and documentation. • Ships a Skill Inspector companion skill guide. Breaking changes: • HTTP MCP clients can no longer scan local filesystem paths or supply local YARA-rule directories; use a remote repository or URL for HTTP requests, or use stdio transport for local scans. https://github.com/NVIDIA/SkillSpector/releases/tag/v2.5.2 https://github.com/NVIDIA/SkillSpector/releases/tag/v2.5.2 Tue, 04 Aug 2026 22:38:47 GMT SkillSpector v2.5.2 adds MCP registry posture scanning and enforces bounded ingest limits for URLs, archives, and Git repos. • Adds MCP registry posture scanning via `skillspector mcp` (install with the `mcp` extra: `skillspector[mcp]`). • Enforces `INGEST_MAX_BYTES` (100 MiB per-ingest cap) and `INGEST_MAX_ZIP_MEMBERS` (10,000 entries) for streamed URL downloads, zip archives, and Git repository clones, failing closed with `IngestLimitExceededError` on breach. https://github.com/NVIDIA/SkillSpector/releases/tag/v2.5.2 https://github.com/NVIDIA/SkillSpector/releases/tag/v2.5.2 Tue, 04 Aug 2026 22:38:47 GMT SkillSpector v2.5.2 adds MCP registry posture scanning and enforces bounded ingest limits for URLs, archives, and Git repos. • Adds MCP registry posture scanning via `skillspector mcp` (install with the `mcp` extra: `skillspector[mcp]`). • Enforces `INGEST_MAX_BYTES` (100 MiB per-ingest cap) and `INGEST_MAX_ZIP_MEMBERS` (10,000 entries) for streamed URL downloads, zip archives, and Git repository clones, failing closed with `IngestLimitExceededError` on breach. https://github.com/NVIDIA/SkillSpector/releases/tag/v2.5.1 https://github.com/NVIDIA/SkillSpector/releases/tag/v2.5.1 Fri, 31 Jul 2026 03:13:57 GMT SkillSpector v2.5.1 adds `SKILLSPECTOR_MAX_LLM_CONCURRENCY` to throttle async LLM batch requests for rate-limited providers. • Adds `SKILLSPECTOR_MAX_LLM_CONCURRENCY` environment variable to configure the default async LLM batch concurrency; blank or invalid values retain the default of 10, and values below 1 clamp to 1. https://github.com/NVIDIA/SkillSpector/releases/tag/v2.5.1 https://github.com/NVIDIA/SkillSpector/releases/tag/v2.5.1 Fri, 31 Jul 2026 03:13:57 GMT SkillSpector v2.5.1 adds `SKILLSPECTOR_MAX_LLM_CONCURRENCY` to throttle async LLM batch requests for rate-limited providers. • Adds `SKILLSPECTOR_MAX_LLM_CONCURRENCY` environment variable to configure the default async LLM batch concurrency; blank or invalid values retain the default of 10, and values below 1 clamp to 1. https://github.com/NVIDIA/SkillSpector/releases/tag/v2.5.0 https://github.com/NVIDIA/SkillSpector/releases/tag/v2.5.0 Mon, 27 Jul 2026 15:48:01 GMT SkillSpector v2.5.0 adds inspection-ledger accounting with `execution_successful` and `analysis_completeness.ledger_exceptions` fields in JSON/SARIF output, plus exit code 2 for fatal failures. • Adds `execution_successful` top-level status field and `analysis_completeness.ledger_exceptions` diagnostics to JSON output, letting automation distinguish a complete scan from a partial or failed one. • CLI now exits with code 2 for a fatal execution or accounting failure, even when a JSON report was produced — enabling fail-closed CI gates. • Adds canonical inspection-ledger accounting across static and LLM analysis stages, with per-component coverage and explicit out-of-scope records in JSON and SARIF output. • Regenerate baselines using `skillspector baseline <path>` to produce version 2 fingerprints, which bind accepted findings to the scanner version, source content, and full finding evidence. • Recursive scans now propagate child scan failures into the combined report and return a non-zero exit when any child fails. Breaking changes: • Baseline files containing version 1 fingerprints are rejected on upgrade. Run `skillspector baseline <path>`, review the generated version 2 entries, and commit the replacement; rules-only version 1 baselines remain supported with a warning. • JSON integrations must now treat invalid or missing output, a nonzero process exit, or `execution_successful: false` as a blocking validation error and surface `analysis_completeness.ledger_exceptions` for diagnosis. https://github.com/NVIDIA/SkillSpector/releases/tag/v2.5.0 https://github.com/NVIDIA/SkillSpector/releases/tag/v2.5.0 Mon, 27 Jul 2026 15:48:01 GMT SkillSpector v2.5.0 adds inspection-ledger accounting with `execution_successful` and `analysis_completeness.ledger_exceptions` fields in JSON/SARIF output, plus exit code 2 for fatal failures. • Adds `execution_successful` top-level status field and `analysis_completeness.ledger_exceptions` diagnostics to JSON output, letting automation distinguish a complete scan from a partial or failed one. • CLI now exits with code 2 for a fatal execution or accounting failure, even when a JSON report was produced — enabling fail-closed CI gates. • Adds canonical inspection-ledger accounting across static and LLM analysis stages, with per-component coverage and explicit out-of-scope records in JSON and SARIF output. • Regenerate baselines using `skillspector baseline <path>` to produce version 2 fingerprints, which bind accepted findings to the scanner version, source content, and full finding evidence. • Recursive scans now propagate child scan failures into the combined report and return a non-zero exit when any child fails. Breaking changes: • Baseline files containing version 1 fingerprints are rejected on upgrade. Run `skillspector baseline <path>`, review the generated version 2 entries, and commit the replacement; rules-only version 1 baselines remain supported with a warning. • JSON integrations must now treat invalid or missing output, a nonzero process exit, or `execution_successful: false` as a blocking validation error and surface `analysis_completeness.ledger_exceptions` for diagnosis.