An agent skill can hand a stranger your shell – hours after you installed it