SkillHarm: Lifecycle-Aware Skill-Based Attacks via Automated Construction