Skill Plan: HA alignment improvements

Security scan

AI scan Medium

VirusTotal scan Unknown

What looks risky

Privacy exfiltration 5.8

skill.md

mentions sensitive credential material

- Follow-up fix: use hass.states.get(...) to avoid StateMachine membership errors on setup.