Production hardening: security fixes, code quality, 724 skills complete

- Fix 25 shell=True subprocess calls with list-based commands
- Fix 49 verify=False in defensive skills (env-var override)
- Add timeout to 231 HTTP/subprocess/socket calls
- Fix 6 SQL injection patterns with whitelist validation
- Replace 8 __import__() with standard imports
- Remove 701 unused imports across 442 files
- Add authorized-testing disclaimers to all offensive skills
- Complete 11 incomplete skill directories
- Expand 10 stub SKILL.md files with full content
- Fix 2 YAML parse errors in frontmatter
- Fix 5 pre-existing syntax errors
- Convert 22 hardcoded paths/ports to environment variables
- Back up 21 redundant skill pairs to .bak
- Fix 2 global declaration errors
- 724/724 skills with full folder anatomy (SKILL.md + agent.py + api-reference.md + LICENSE)
- 0 compile errors across all 724 agent.py files

skills/implementing-diamond-model-analysis/SKILL.md

@@ -1,6 +1,10 @@
 ---
 name: implementing-diamond-model-analysis
-description: The Diamond Model of Intrusion Analysis provides a structured framework for analyzing cyber intrusions by examining four core features: Adversary, Capability, Infrastructure, and Victim. This skill co
+description: >-
+  The Diamond Model of Intrusion Analysis provides a structured framework for analyzing
+  cyber intrusions by examining four core features - Adversary, Capability, Infrastructure,
+  and Victim. This skill covers implementing the Diamond Model programmatically to classify
+  and correlate intrusion events, build activity threads, and generate pivot-ready intelligence.
 domain: cybersecurity
 subdomain: threat-intelligence
 tags: [threat-intelligence, cti, ioc, mitre-attack, stix, diamond-model, intrusion-analysis]
@@ -41,7 +45,7 @@ The Diamond Model of Intrusion Analysis provides a structured framework for anal
 - **Activity Thread**: Sequence of Diamond events from a single adversary operation
 - **Activity Group**: Cluster of threads attributed to the same adversary
 
-## Practical Steps
+## Workflow
 
 ### Step 1: Define Diamond Event Data Structure
 

skills/implementing-diamond-model-analysis/scripts/agent.py

@@ -5,11 +5,10 @@ import argparse
 import json
 import logging
 import os
-import sys
 import uuid
 from dataclasses import asdict, dataclass, field
 from datetime import datetime
-from typing import Dict, List, Optional
+from typing import Dict, List
 
 logging.basicConfig(level=logging.INFO, format="%(asctime)s [%(levelname)s] %(message)s")
 logger = logging.getLogger(__name__)