Hottest cybersecurity open-source tools of the month: August 2026
August's open-source security roundup highlights NVIDIA SkillSpector for AI agent skill scanning, Future AGI, Chainloop, PentestGPT, and Hazmat agent containment.
Help Net Security's August 2026 roundup covers five open-source tools: NVIDIA's SkillSpector, a scanner that assesses AI agent skills from directories, zips, SKILL.md files, or Git URLs and returns findings and risk scores; Future AGI, an Apache 2.0 platform for tracing, evaluating, simulating, and guardrailing LLM agents; Chainloop, a software supply chain evidence store that produces signed in-toto attestations in CI pipelines; PentestGPT, an agentic penetration testing framework running recon, exploit, and reporting stages; and Hazmat, which runs AI coding agents like Claude Code and Codex inside a separate machine account for containment.
- SkillSpector gives risk scores and recommendations before installing agent skills.
- Chainloop records build provenance using signed in-toto attestations.
- PentestGPT runs autonomous penetration testing stages without human review.
- Hazmat sandboxes AI coding agents in an isolated local account.
- Vendors
- NVIDIA
From the original article
2 min read at helpnetsecurity.com
Presented here is a curated selection of noteworthy open-source cybersecurity solutions that have drawn recognition for their ability to enhance security postures across diverse settings. SkillSpector: NVIDIA’s open-source security scanner for AI agent skills SkillSpector is an open-source scanner from NVIDIA that reads an agent skill and tells you whether to install it.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.