The attacks that ride along when you install a skill from GitHub - and the gates that strip them out.