fix(skills): catch stateless ghs_ tokens in the secret tripwire

skills/send-email/SKILL.md

@@ -83,7 +83,7 @@ The send is the skill's **final** action and is **fail-closed**: apply every che
    ```
 5. **Recipient sanity.** `$TO` must match `^[^@[:space:]]+@[^@[:space:]]+\.[^@[:space:]]+$` (`grep -qE`) → else `SEND_EMAIL_REFUSED: bad recipient`, stop.
 6. **Cooldown.** If `$TO` was emailed within `${DISCLOSURE_EMAIL_COOLDOWN_DAYS:-7}` days (find its latest `.sent_at` in the ledger and compare with a `python3` datetime diff) → `SEND_EMAIL_SKIP: cooldown`, stop.
-7. **Secret tripwire.** If subject+body match `grep -qE '(sk-[A-Za-z0-9]{20}|re_[A-Za-z0-9]{8}[A-Za-z0-9_]{12}|gh[pousr]_[A-Za-z0-9]{20}|AKIA[0-9A-Z]{16}|AIza[0-9A-Za-z_-]{20}|-----BEGIN [A-Z ]*PRIVATE KEY-----)'` → `SEND_EMAIL_BLOCKED: secret in body`, stop (never exfiltrate a token).
+7. **Secret tripwire.** If subject+body match `grep -qE '(sk-[A-Za-z0-9]{20}|re_[A-Za-z0-9]{8}[A-Za-z0-9_]{12}|gh[pousr]_[A-Za-z0-9_]{20}|AKIA[0-9A-Z]{16}|AIza[0-9A-Za-z_-]{20}|-----BEGIN [A-Z ]*PRIVATE KEY-----)'` → `SEND_EMAIL_BLOCKED: secret in body`, stop (never exfiltrate a token).
 8. **Build cc** = the request's `cc` (comma-list or array) **plus** `$RESEND_CC` (operator audit copy), with blanks and `$TO` removed and deduped (`jq`).
 9. **Build payload + send.** Build the JSON with `python3` reading `RESEND_FROM`/`RESEND_REPLY_TO` from `os.environ` — so no secret-named var ever lands on a command line (a `--arg from "$RESEND_FROM"` would risk the analyzer block). Then POST with `./secretcurl` (the `{RESEND_API_KEY}` header placeholder is substituted inside the script; `$PAYLOAD` carries only the already-resolved from-address, not a secret-named expansion). `slug` is the idempotency key so a re-run can't double-send:
    ```bash

skills/vuln-scanner/SKILL.md

@@ -1063,7 +1063,7 @@ sending. Only `./secretcurl`, `jq`, `python3`, `grep`, `date`, `echo`, `mkdir`,
    - `MXN == 0`: retry once against Cloudflare (`./secretcurl -sS --max-time 10 -H 'accept: application/dns-json' "https://cloudflare-dns.com/dns-query?name=${DOMAIN}&type=MX"`). Still none → look up an A record (`&type=A`, `.type==1`): a domain with an A but no MX still accepts mail at that host (RFC 5321 §5.1), so treat a resolvable A as deliverable.
    - **No MX and no A, or both lookups error / time out → do NOT send (fail closed).** Flip the draft to `status: contact-unverified` and add a `deliverability: no-mx` frontmatter line so it drops out of the eligible set and surfaces to the operator; do not consume the budget.
 6. **Cooldown.** If this `to` was emailed within `${DISCLOSURE_EMAIL_COOLDOWN_DAYS:-7}` days (latest `.to`→`.sent_at` in the ledger, `python3` datetime diff) → skip, leave queued, retry after the window. A cooled-down draft does **not** consume the budget — move to the next.
-7. **Secret tripwire.** If subject+body match `grep -qE '(sk-[A-Za-z0-9]{20}|re_[A-Za-z0-9]{8}[A-Za-z0-9_]{12}|gh[pousr]_[A-Za-z0-9]{20}|AKIA[0-9A-Z]{16}|AIza[0-9A-Za-z_-]{20}|-----BEGIN [A-Z ]*PRIVATE KEY-----)'` → **do not send**, log `BLOCKED: possible secret in body`, leave for operator review.
+7. **Secret tripwire.** If subject+body match `grep -qE '(sk-[A-Za-z0-9]{20}|re_[A-Za-z0-9]{8}[A-Za-z0-9_]{12}|gh[pousr]_[A-Za-z0-9_]{20}|AKIA[0-9A-Z]{16}|AIza[0-9A-Za-z_-]{20}|-----BEGIN [A-Z ]*PRIVATE KEY-----)'` → **do not send**, log `BLOCKED: possible secret in body`, leave for operator review.
 8. **Build cc** = the draft's `cc` (array or comma-string) + `$RESEND_CC` (operator audit copy), minus blanks and the `to`, deduped (`jq`).
 9. **Build payload + send.** Build the JSON body with `python3`, reading `RESEND_FROM`/`RESEND_REPLY_TO` from `os.environ` (never a `--arg from "$RESEND_FROM"` on the line — that risks the analyzer block); pass only the non-secret `to`/`subject`/`body`/`cc` as argv. Then POST with `./secretcurl` (the `{RESEND_API_KEY}` header placeholder is substituted inside the script); the clean `slug` is the idempotency key:
    ```bash