A fake AI skill just passed every security scanner by pointing at an external link, then swapping what lived there after approval. Reached 26,000 agents. That's the part automated vetting can't catch. You're not reviewing code, you're reviewing a promise that the code won't change. Scanners check what's there. The exploit is what shows up later.