Auditing Agent Skills: A Threat Model for the Next Generation of AI Package Managers

Let me start with a question. If a stranger handed you a USB drive and said "plug this in, it just organizes your files," would you do it? Probably not. Most of us have had the "don't plug in random U...