Static security audit toolkit for AI agent skills — surfaces every capability a skill may exercise, with evidence.