Remember: LLMs are able to execute text, which makes all text basically code.

Even if you trust the creators of the skills you're using, any untrusted text from any source you're working on can screw you.