PAI security audit — scans Claude Code config (settings, MCP servers, skills, agents, hooks) for risky configurations, supply-chain drift, and weekly deltas. USE WHEN user mentions audit PAI, security audit, PAI security check, supply chain audit, skill audit, MCP audit, OR wants weekly security report. Inspired by HarmonicSecurity/claudit-sec but built for Claude Code (not Claude Desktop).