The Pull: Week 24, 2026

This week in open source: App stores, Apple-native containers, and leaner vector search for a more secure, sensible developer stack

1) SkillSpector: The App Store Needs Security

github.com/NVIDIA/SkillSpector | License: Apache-2.0

Featured in The Push: June 11th, 2026

SkillSpector scans AI agent skills for hidden security risks across prompts, code, dependencies, and declared permissions. The clever bit is the layered architecture, static checks for hard signals, semantic analysis for …