A UK registrar traced its September break-in to hosted agent skills copied from Anthropic's open-source releases.