fix: enable only curated agent skills

2026-07-11 12:25:52 +08:00
parent 96e120e02c
commit 17c0536958
6 changed files with 14 additions and 9 deletions
@@ -125,7 +125,8 @@ The boundary is enforced by the Claude Code SDK's built-in sandbox
 - Platform-curated Agent skills are immutable Hub release assets, loaded as a
  programmatic local plugin from a release-owned path. The sandbox exposes that
  path read-only, and the SDK receives only plugin-qualified allowlist names
-  through its `skills` option. Filesystem setting sources remain disabled, so a
+  through its `skills` option; SDK-bundled skills are disabled. Filesystem
+  setting sources remain disabled, so a
  project cannot register another skill or widen its tools through `.claude`
  settings. Requested skill ids are recorded on `run.created`; SDK
  initialization/results remain the authoritative evidence that loading