Rewrite 548 skill descriptions to the activation rubric

Each rewritten description now states both what the skill does (concrete
capability, named tools/artifacts) and an explicit when-to-use trigger,
improving agent discovery/activation. Grounded in each skill's own body;
changes confined to the `description` field only (bodies and all other
frontmatter untouched). Produced by a gated audit->rewrite->recheck loop
(548 -> 0 flagged) with a sampled anti-invention check (0 ungrounded).

Schema: 817/817 pass. Framework-ID gate: 0 defects.

skills/performing-static-malware-analysis-with-pe-studio/SKILL.md

@@ -1,13 +1,11 @@
 ---
 name: performing-static-malware-analysis-with-pe-studio
-description: 'Performs static analysis of Windows PE (Portable Executable) malware
-  samples using PEStudio to examine file headers, imports, strings, resources, and
-  indicators without executing the binary. Identifies suspicious characteristics including
-  packing, anti-analysis techniques, and malicious imports. Activates for requests
-  involving static malware analysis, PE file inspection, Windows executable analysis,
-  or pre-execution malware triage.
-
-  '
+description: >-
+  Performs static analysis of Windows PE malware samples using PEStudio to
+  examine file headers, imports, strings, and resources without executing
+  the binary, identifying packing, anti-analysis tricks, and malicious
+  imports. Use for pre-execution triage of a suspicious Windows executable
+  before sandbox detonation.
 domain: cybersecurity
 subdomain: malware-analysis
 tags: