Function is_valid_skill_name 

pub fn is_valid_skill_name(name: &str) -> bool

Validate that a skill name contains only safe identifier characters.

Skill names are interpolated into XML-like <skill-instruction source="…"> attributes. Restricting the character set at load time means injection is blocked at the source rather than relying solely on escaping at emit time.