Claude Code skills as a supply chain: 2.2 million adoptions, no registry, and a scanner that reads the source while Python runs the cache
Reading a skill before you run it is the standard advice, and it has two holes. A copied skill has no update channel, so the copy you read can drift from its source without telling you, and for a skill that ships Python, the file you read is not always the file the interpreter loads.