July 19, 2026·4 min readInstalling an agent skill is running untrusted codeA skill looks like documentation, so teams install one like they trust a README. The audits say treat it like code you are about to execute.