You locked down MCP. Skills walked in through the window
Skills bundle instructions, scripts, and MCP servers into a single installable package. That convenience is also the attack surface, and in February 2026 someone used it 335 times in three days.
