rtl-readiness

The skill’s stated purpose and requested actions are coherent for RTL QA/remediation, and it does not request credentials or route data to third-party endpoints. Main concern is reliance on an unverifiable external CLI (`observe-runtime`), which raises supply-chain risk despite otherwise benign scope.