想给AI技能加安全审计，可以照这个教程搭一套：NVIDIA SkillSpector扫描、YARA规则拦截、CI门禁卡关，步骤很清楚。
本教程演示如何用NVIDIA SkillSpector和LangGraph搭建AI代理技能的安全审计流水线。流程先构造一个合成技能市场，再扫描恶意提示注入、凭证访问和危险依赖。你可以自定义YARA规则，配置基线豁免，并把SARIF结果接入CI部署门禁。整个方案面向AI技能供应链的自动化安全检查。
Building an Advanced AI Skill Security Auditing Pipeline with NVIDIA SkillSpector, LangGraph, YARA Rules, SARIF, and CI Policy Gates
Learn how to build an end-to-end security assessment pipeline for AI agent skills using NVIDIA SkillSpector and LangGraph. In this tutorial, we construct a synthetic skill marketplace, scan for malicious prompt injection, credential access, and risky dependencies, and implement custom YARA rules, baseline suppressions, and CI deployment gates. The post Building an Advanced AI Skill Security Auditing Pipeline with NVIDIA SkillSpector, LangGraph, YARA Rules, SARIF, and CI Policy Gates appeared first on MarkTechPost .