$ npx skills add https://github.com/cisco-ai-defense/skill-scanner --skill ransomware-chain
The inert source in payload.py is scanned statically and is never imported or executed.