SkillSpector is a Python tool that checks AI agent plugins, like those for Claude Code or Gemini, before you install them. It flags prompt injection, data exfiltration, supply-chain risks and other vulnerabilities, then outputs a safety report.
Why it matters. Developers and ops teams that ship AI agents should run it to avoid loading vulnerable or malicious skills.
Today in one paragraph. Today's theme is turning everyday actions into AI assistants, exemplified by Microsoft’s Skill Recorder that lets you capture a single task and instantly generate a Copilot skill. The roundup also covers tools for steering code agents, terminal-based Gemini chat, sandboxed AI agents, and a robot framework that learns evolving rules.