I like the way that skills.md are distributed.

There is no central directory–you just put a specifically formatted file in your github repo.

Others can install it by pointing at your github user name + repo.

Yes, it's not fully decentralized (it assumes Github).

But a) it's easy to add other hosts, like Go did for packages.

And b) the fact it's two distinct actors (Anthropic and Github) makes it much less likely there will be bad behavior than if those two positions were merged into one.