Add Skill Inspector companion skill

[Dxboy266]

Summary

Adds skills/skill-inspector, a companion Agent Skill that uses SkillSpector as the static evidence layer before an agent performs source-aware semantic review.

The skill workflow:

• runs skillspector scan --no-llm --format json
• reads the target skill's SKILL.md, executable scripts, MCP config/tool metadata, and finding locations
• combines static findings with source context into APPROVE / CAUTION / REJECT

Why

SkillSpector scores and findings are strong evidence, but some sensitive capabilities are expected for certain skills. This companion skill gives agent runtimes a repeatable install-before-review workflow that does not require configuring an LLM provider inside SkillSpector.

Files

• skills/skill-inspector/SKILL.md
• skills/skill-inspector/README.md
• skills/skill-inspector/LICENSE

Verification

Scanned the companion skill locally with SkillSpector static mode:

skillspector scan /Users/zhouxin/DX/qsproject/skill-inspector --no-llm --format json --output /tmp/skill-inspector-self.json

Result: 0 / LOW / SAFE, no issues.

[Dxboy266]

Closing this superseded PR because its original branch name and earlier iteration were misleading. Reopened as #253 with a clean branch and a single skill-only commit under skills/skill-inspector.