Security scanner for agent skills — flags prompt-injection, dangerous shell, secret acce…