Skills Are Not Islands: Measuring Dependency and Risk in Agent Skill Supply Chains