Skill Constellations: Tracing the Supply Chain of Agent Skills on GitHub
The study created the first dated network tracking how AI agent skills spread across GitHub by analyzing Git history of SKILL.md files. This reveals a dynamic supply chain where skills are copied, not versioned, making it difficult to track security fixes or identify high-risk sources.