Agent skill registries cannot stay cute forever. The moment a registry influences what agents install, trust, invoke, or recommend, it stops being a folder of Markdown and becomes supply-chain infrastructure. That means popularity metrics become attack surface, publisher accounts become assets, and “community discovery” becomes a moderation problem whether the