Production hardening: security fixes, code quality, 724 skills complete

- Fix 25 shell=True subprocess calls with list-based commands
- Fix 49 verify=False in defensive skills (env-var override)
- Add timeout to 231 HTTP/subprocess/socket calls
- Fix 6 SQL injection patterns with whitelist validation
- Replace 8 __import__() with standard imports
- Remove 701 unused imports across 442 files
- Add authorized-testing disclaimers to all offensive skills
- Complete 11 incomplete skill directories
- Expand 10 stub SKILL.md files with full content
- Fix 2 YAML parse errors in frontmatter
- Fix 5 pre-existing syntax errors
- Convert 22 hardcoded paths/ports to environment variables
- Back up 21 redundant skill pairs to .bak
- Fix 2 global declaration errors
- 724/724 skills with full folder anatomy (SKILL.md + agent.py + api-reference.md + LICENSE)
- 0 compile errors across all 724 agent.py files

skills/analyzing-supply-chain-malware-artifacts/scripts/agent.py

@@ -135,8 +135,7 @@ if __name__ == "__main__":
 
     target = sys.argv[1] if len(sys.argv) > 1 else None
     if not target:
-        print("
-[DEMO] Usage:")
+        print("\n[DEMO] Usage:")
         print("  python agent.py <package.json>         # Analyze npm package")
         print("  python agent.py npm:<package_name>     # Check npm registry")
         print("  python agent.py pypi:<package_name>    # Check PyPI registry")
@@ -144,17 +143,14 @@ if __name__ == "__main__":
 
     if target.startswith("npm:"):
         pkg_name = target[4:]
-        print(f"
-[*] Checking npm: {pkg_name}")
+        print(f"\n[*] Checking npm: {pkg_name}")
         info = check_npm_package(pkg_name)
         typos = detect_typosquat_packages(pkg_name)
         print(json.dumps(info, indent=2))
-        print(f"
-  Potential typosquats: {typos[:10]}")
+        print(f"\n  Potential typosquats: {typos[:10]}")
     elif target.startswith("pypi:"):
         pkg_name = target[5:]
-        print(f"
-[*] Checking PyPI: {pkg_name}")
+        print(f"\n[*] Checking PyPI: {pkg_name}")
         info = check_pypi_package(pkg_name)
         print(json.dumps(info, indent=2))
     elif os.path.exists(target):