Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-09 · source-backed
The Apache-2.0 scanner (14,403 stars) shipped v2.8.1 on August 7 and v2.8.2 on August 8, covering Claude Code, Codex CLI, and Gemini CLI across 68 vulnerability patterns in 17 categories, with live OSV.dev CVE lookups and SARIF output (GitHub). The actionable ratio: skills bundling executable scripts are 2.12x more likely to be vulnerable. Risk concentrates in the script payload, not the SKILL.md prose. If you're only reviewing the markdown before installing a skill, you're reviewing the wrong file.
Each link below shares sources, entities, or timing with this story.
NVIDIA uses Claude Code / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (NVIDIA uses Claude Code); both cover Claude Code, Codex CLI, Gemini CLI, GitHub; reported by the same outlet (github.com).
Linked by a graph relationship (NVIDIA uses Claude Code); both cover Claude Code, Codex CLI, Gemini CLI, Skill; reported by the same outlet (github.com).
NVIDIA partners with Google / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (NVIDIA partners with Google); both cover August, Claude Code, Codex CLI, Gemini CLI; overlapping topics (august, code, skill).
NVIDIA uses Claude Code / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (NVIDIA uses Claude Code); both cover Claude Code, Codex CLI, Gemini CLI, GitHub; reported by the same outlet (github.com).
Linked by a graph relationship (NVIDIA uses Claude Code); both cover Claude Code, Codex CLI, GitHub, SKILL; reported by the same outlet (github.com).
NVIDIA uses Claude Code / Shared entities / Same source domain / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (NVIDIA uses Claude Code); both cover Claude Code, Codex CLI, GitHub; reported by the same outlet (github.com).
NVIDIA uses Codex / Shared entities / Same source domain / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (NVIDIA uses Codex); both cover Claude Code, GitHub, Skill; reported by the same outlet (github.com).
NVIDIA uses Claude Code / Shared entities / Same source domain / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (NVIDIA uses Claude Code); both cover Claude Code, Gemini CLI, GitHub; reported by the same outlet (github.com).