Security scanner for AI skill files (SKILL.md) and bundled code (scripts/, tools/). It helps you catch high-risk patterns before publishing or running a skill.