The scariest stat in agent-land this week: ~17% of analyzed OpenClaw skills carried malicious payloads, and one disclosure found 341 bad ones. I run a skills marketplace. This isn't an argument against marketplaces. It's an argument for the boring work nobody wants to fund: review, provenance, and revocation. Open ecosystems don't fail from too many builders. They fail from nobody checking the door.