Production hardening: security fixes, code quality, 724 skills complete

- Fix 25 shell=True subprocess calls with list-based commands
- Fix 49 verify=False in defensive skills (env-var override)
- Add timeout to 231 HTTP/subprocess/socket calls
- Fix 6 SQL injection patterns with whitelist validation
- Replace 8 __import__() with standard imports
- Remove 701 unused imports across 442 files
- Add authorized-testing disclaimers to all offensive skills
- Complete 11 incomplete skill directories
- Expand 10 stub SKILL.md files with full content
- Fix 2 YAML parse errors in frontmatter
- Fix 5 pre-existing syntax errors
- Convert 22 hardcoded paths/ports to environment variables
- Back up 21 redundant skill pairs to .bak
- Fix 2 global declaration errors
- 724/724 skills with full folder anatomy (SKILL.md + agent.py + api-reference.md + LICENSE)
- 0 compile errors across all 724 agent.py files

skills/performing-hash-cracking-with-hashcat/scripts/agent.py

@@ -6,8 +6,8 @@ import argparse
 import subprocess
 import hashlib
 import re
+from collections import Counter
 from pathlib import Path
-from datetime import datetime
 
 
 HASH_PATTERNS = {
@@ -121,7 +121,7 @@ def parse_hashcat_status(potfile):
         "total_cracked": len(cracked),
         "length_distribution": length_dist,
         "charset_analysis": charset,
-        "top_passwords": [p for p, _ in __import__("collections").Counter(passwords).most_common(10)],
+        "top_passwords": [p for p, _ in Counter(passwords).most_common(10)],
     }