Tools
NVIDIA's Agent-Skill Security Scanner Shipped Two Patches in Ten Hours, Both About LLM Calls Failing Mid-Scan
NVIDIA/SkillSpector (14,498 stars, 1,215 forks, created 2026-03-21) released v2.9.1 at 18:44 UTC on 2026-08-10 and v2.9.2 at 04:22 UTC on 2026-08-11. v2.9.1 added bounded retries for transient LLM-provider connection failures and made the inspection ledger distinguish malformed structured responses from exhausted connection retries; v2.9.2 extended bounded-backoff retry to semantic analyzers, the meta-analyzer, TP4, and gap-fill paths. Both releases keep fail-closed batch isolation after the retry budget runs out — a notable design stance for a security scanner, since the alternative is silently under-reporting vulnerabilities when the model provider flakes.
Source
↳ Follow the thread