The Pull: Week 24, 2026

This week in open source: Safer app installs, containerized macOS dev, and product specs that turn into working code

1) SkillSpector: The App Store Needs Security

github.com/NVIDIA/SkillSpector | License: Apache-2.0

Featured in The Push: June 11th, 2026

SkillSpector scans AI agent skills for hidden security risks across prompts, code, dependencies, and declared permissions. The clever bit is the layered architecture, static checks for hard signals, semantic analysis for …