Loader Skill (import-path hijack surface)
Adds a relative directory to sys.path and imports a module from it. Because the path
is relative it resolves against the current working directory, which an attacker on the
same host can influence — a benign skill weaponized by its environment.