Add folder anatomy (scripts/agent.py + references/api-reference.md) for 648 cybersecurity skills

Complete skill folder anatomy across all cybersecurity skills:
- scripts/agent.py: 80-150 line Python agents using real libraries (impacket,
  boto3, azure-mgmt-*, kubernetes, pefile, yara, scapy, shodan, stix2, etc.)
- references/api-reference.md: real API documentation with method signatures
- LICENSE: MIT license for all skill folders

skills/analyzing-threat-landscape-with-misp/references/api-reference.md

@@ -0,0 +1,64 @@
+# API Reference: MISP Threat Landscape Analysis
+
+## PyMISP Connection
+```python
+from pymisp import PyMISP
+misp = PyMISP(url, api_key, ssl=True)
+```
+
+## Event Search
+```python
+events = misp.search(date_from="2025-01-01", pythonify=True)
+```
+| Parameter | Description |
+|-----------|-------------|
+| `date_from` | Start date (YYYY-MM-DD) |
+| `date_to` | End date |
+| `tags` | Filter by tags |
+| `threat_level_id` | 1=High, 2=Medium, 3=Low, 4=Undefined |
+| `published` | True/False |
+| `pythonify` | Return MISPEvent objects |
+
+## Event Object Fields
+| Field | Description |
+|-------|-------------|
+| `id` | Event ID |
+| `date` | Event date |
+| `threat_level_id` | 1-4 severity level |
+| `analysis` | 0=Initial, 1=Ongoing, 2=Completed |
+| `info` | Event description |
+| `Attribute` | List of IOC attributes |
+| `Tag` | List of tags |
+| `Orgc` | Contributing organization |
+
+## Attribute Types
+| Type | Example |
+|------|---------|
+| `ip-dst` | Destination IP address |
+| `ip-src` | Source IP address |
+| `domain` | Domain name |
+| `hostname` | FQDN |
+| `url` | Full URL |
+| `md5` / `sha1` / `sha256` | File hashes |
+| `email-src` | Sender email |
+| `filename` | Malicious filename |
+| `mutex` | Mutex name |
+| `regkey` | Registry key |
+
+## Galaxy Tag Prefixes
+| Prefix | Content |
+|--------|---------|
+| `misp-galaxy:mitre-attack-pattern=` | MITRE ATT&CK techniques |
+| `misp-galaxy:threat-actor=` | Threat actor groups |
+| `misp-galaxy:malpedia=` | Malware families |
+| `misp-galaxy:sector=` | Target sectors |
+| `misp-galaxy:country=` | Target countries |
+
+## Statistics API
+```python
+misp.get_community_id()
+misp.user_statistics()
+misp.attributes_statistics(context="type")
+misp.attributes_statistics(context="category")
+misp.tags_statistics()
+```