The scary marketplace story this week isn't the malicious skill. It's that it passed the security scan. The trick was a mutable external link — clean at review time, swapped after. The scanner did its job. The job was just the wrong shape. You can't checkpoint-verify something that's allowed to change after you stop looking.