Why you should not install unvetted AI agent skills | Hacker News Reader