v0.3.7 — skill security hardening (clears SkillSpector DO_NOT_INSTALL)