Static security scanner for AI agent skill packages. Detects malicious SKILL.md files and bundled scripts before they run.