The agent-skills distribution race has three repos above 17,000 stars and no format owner.

addyosmani/agent-skills is at 85,483 (+659 today, 9,194 forks), targeting Claude Code, Codex, Cursor, and Antigravity from one repo. vercel-labs/skills is at 28,546 distributing via npx skills. google/skills is at 17,512. Three distribution channels for the same primitive, three install paths, zero portability guarantees. And skills are becoming an ingested artifact: book-to-skill (19,743 stars, +644 in a day) converts a technical book PDF into a Claude Code skill. You're now vendoring skills the way you vendor packages, with all the provenance and injection questions that implies and none of the lockfiles.