lint-and-validate

The lint-and-validate skill is coherently aligned with its stated purpose of enforcing code quality through local linting, type checking, and security scans. It does not request credentials, download unverifiable binaries, or route data through untrusted third-party services. Data flows are contained to local tooling outputs and standard registry lookups, which are typical and proportionate for a developer-focused quality loop. Overall risk is low and footprint is appropriate for its purpose.