SKILL.md is the new package.json — and almost nobody scans it

In September, a wave of self-replicating packages swept through npm accounts. You probably read about it. What stuck with me wasn't the worm itself — it was the realization that the next wave wouldn't need postinstall scripts at all. It would just be a markdown file. Agent platforms standardized on…