Production hardening: security fixes, code quality, 724 skills complete

- Fix 25 shell=True subprocess calls with list-based commands
- Fix 49 verify=False in defensive skills (env-var override)
- Add timeout to 231 HTTP/subprocess/socket calls
- Fix 6 SQL injection patterns with whitelist validation
- Replace 8 __import__() with standard imports
- Remove 701 unused imports across 442 files
- Add authorized-testing disclaimers to all offensive skills
- Complete 11 incomplete skill directories
- Expand 10 stub SKILL.md files with full content
- Fix 2 YAML parse errors in frontmatter
- Fix 5 pre-existing syntax errors
- Convert 22 hardcoded paths/ports to environment variables
- Back up 21 redundant skill pairs to .bak
- Fix 2 global declaration errors
- 724/724 skills with full folder anatomy (SKILL.md + agent.py + api-reference.md + LICENSE)
- 0 compile errors across all 724 agent.py files

skills/performing-kubernetes-etcd-security-assessment/scripts/agent.py

@@ -3,6 +3,7 @@
 
 import json
 import argparse
+import os
 import subprocess
 import re
 from datetime import datetime
@@ -42,7 +43,8 @@ def check_etcd_encryption(kubeconfig=None):
         return {"error": str(e)}
 
 
-def check_etcd_access(etcd_endpoint="https://127.0.0.1:2379", cert=None, key=None, cacert=None):
+def check_etcd_access(etcd_endpoint=None, cert=None, key=None, cacert=None):
+    etcd_endpoint = etcd_endpoint or os.environ.get("ETCD_ENDPOINT", "https://127.0.0.1:2379")
     """Test etcd access and check for unauthenticated access."""
     cmd = ["etcdctl", "endpoint", "health", "--endpoints", etcd_endpoint]
     if cert:
@@ -154,7 +156,7 @@ def main():
     sub = parser.add_subparsers(dest="command")
     sub.add_parser("encrypt", help="Check encryption at rest")
     a = sub.add_parser("access", help="Test etcd access")
-    a.add_argument("--endpoint", default="https://127.0.0.1:2379")
+    a.add_argument("--endpoint", default=os.environ.get("ETCD_ENDPOINT", "https://127.0.0.1:2379"))
     a.add_argument("--cert", help="Client certificate")
     a.add_argument("--key", help="Client key")
     a.add_argument("--cacert", help="CA certificate")