fix: added path validation for skill names

src/config/skill.rs

@@ -116,6 +116,7 @@ impl Skill {
     }
 
     pub fn load(name: &str) -> Result<Self> {
+        paths::validate_skill_name(name)?;
         let path = paths::skill_file(name);
         let content = read_to_string(&path)
             .with_context(|| format!("Failed to read skill '{name}' at {}", path.display()))?;