Upload an external skill package for security scanning. Runs the full security pipeline, caches the result by content hash, and returns the verdict.
SHA-256 hash of the package content
Source registry (e.g. 'clawhub')
Skill identifier in the source registry
ZIP or TAR.GZ package file
Version identifier from the source registry (optional)
skill, agent