Good call. Agent-created skills persist without any approval gate by default. The Curator helps long-term (archiving unused skills after 30/90 days), but between runs you're exposed. A quick ls on skills/ before any customization session is a solid habit.