Your AI agent installs skills like npm packages — but nobody's scanning them

Last month I counted the "skills," plugins, and MCP servers I'd dropped into my AI coding agent. Thirty-one. I had read maybe four of them end to end. That bothered me, because an agent skill isn't a library you call — it's a set of instructions your agent obeys. A plugin or MCP server hands the agent new powers. We install them the way we install... Weiterlesen: Your AI agent installs skills like npm packages — but nobody's scanni…