Auditing Agent Skills: A Threat Model for the Next Generation of AI Package Managers | Loukly