Add folder anatomy (scripts/agent.py + references/api-reference.md) for 648 cybersecurity skills

Complete skill folder anatomy across all cybersecurity skills:
- scripts/agent.py: 80-150 line Python agents using real libraries (impacket,
  boto3, azure-mgmt-*, kubernetes, pefile, yara, scapy, shodan, stix2, etc.)
- references/api-reference.md: real API documentation with method signatures
- LICENSE: MIT license for all skill folders

skills/implementing-network-traffic-analysis-with-arkime/SKILL.md

@@ -0,0 +1,34 @@
+---
+name: implementing-network-traffic-analysis-with-arkime
+description: >-
+  Deploy and query Arkime (formerly Moloch) for full packet capture network
+  traffic analysis. Uses the Arkime API v3 to search sessions, download PCAPs,
+  analyze connection patterns, detect beaconing behavior, and identify suspicious
+  network flows. Monitors DNS queries, HTTP traffic, and TLS certificate anomalies
+  across captured traffic.
+---
+
+## Instructions
+
+1. Install dependencies: `pip install requests`
+2. Configure Arkime viewer URL and credentials.
+3. Run the agent to query Arkime sessions and analyze traffic:
+   - Search sessions by IP, port, protocol, or expression
+   - Download PCAP data for forensic analysis
+   - Detect C2 beaconing via connection interval analysis
+   - Identify DNS tunneling through query length statistics
+   - Flag connections to known-bad TLS certificate issuers
+
+```bash
+python scripts/agent.py --arkime-url https://arkime.local:8005 --user admin --password secret --output arkime_report.json
+```
+
+## Examples
+
+### Beaconing Detection
+```
+Source: 10.1.2.50 -> 185.220.101.34:443
+Sessions: 288 over 24 hours
+Avg interval: 300s, Jitter: 4.2%
+Verdict: HIGH confidence C2 beaconing (jitter < 5%)
+```