Complete folder anatomy for all 649 cybersecurity skills + update LICENSE to Mahipal

- Add scripts/agent.py and references/api-reference.md to all remaining skills
- Update all 648 LICENSE files: copyright now reads 'Mahipal'
- Add implementing-security-monitoring-with-datadog (new skill with full anatomy)
- All 649 skills now have: SKILL.md, LICENSE, scripts/agent.py, references/api-reference.md

skills/performing-open-source-intelligence-gathering/references/api-reference.md

@@ -0,0 +1,43 @@
+# API Reference — Performing Open Source Intelligence Gathering
+
+## Libraries Used
+- **requests**: HTTP requests for tech fingerprinting and social media checks
+- **dns.resolver** (dnspython): DNS record enumeration and subdomain discovery
+- **python-whois**: Domain WHOIS registration data
+- **re**: Email pattern extraction
+- **socket**: Network connectivity
+
+## CLI Interface
+```
+python agent.py whois --domain example.com
+python agent.py dns --domain example.com
+python agent.py email --domain example.com
+python agent.py tech --url https://example.com
+python agent.py social --name "John Doe"
+```
+
+## Core Functions
+
+### `whois_lookup(domain)` — Domain registration data
+Returns registrar, creation/expiration dates, name servers, registrant info.
+
+### `dns_enumeration(domain)` — DNS record and subdomain discovery
+Queries 7 record types. Tests 15 common subdomain prefixes.
+
+### `email_harvest(domain)` — Email address discovery
+Uses Hunter.io API and regex pattern matching.
+
+### `technology_fingerprint(url)` — Web technology identification
+Detects: web server, framework, CMS. Audits 6 security headers.
+
+### `social_media_search(target_name)` — Profile enumeration
+Checks: LinkedIn, Twitter/X, GitHub, Facebook, Instagram.
+
+## Security Headers Checked
+Strict-Transport-Security, Content-Security-Policy, X-Frame-Options,
+X-Content-Type-Options, X-XSS-Protection, Referrer-Policy
+
+## Dependencies
+```
+pip install requests dnspython python-whois
+```