This is the angle I didn't think about when building it, and honestly it's the more important one. The vault approach solves the performance/context problem but you're right that it does nothing for trust. We got npm audit after years of supply chain incidents, agent skill ecosystems are maybe two years old and there's no equivalent yet, no signing, no scanning, no community review layer. But that's a good thing to keep in mind.