fix: enable only curated agent skills

hub/test/unit/runner.test.ts

@@ -112,6 +112,7 @@ describe("runAgent", () => {
         permissionMode: "bypassPermissions",
         allowDangerouslySkipPermissions: true,
         settingSources: [],
+        settings: { disableBundledSkills: true },
         plugins: [expect.objectContaining({ type: "local", skipMcpDiscovery: true })],
         skills: ["cph-curated:outline", "cph-curated:lesson-project", "cph-curated:data-processing-spec"],
         strictMcpConfig: true,
@@ -182,13 +183,13 @@ describe("runAgent", () => {
 
     expect(queryMock.mock.calls[0]?.[0]).toMatchObject({
       options: {
-        tools: ["Read", "Bash"],
+        tools: ["Read", "Bash", "Skill"],
         allowedTools: ["Read", "Bash", "mcp__cph_hub__send_file"],
       },
     });
   });
 
-  it("disables all SDK tools for an empty role tool whitelist", async () => {
+  it("keeps only the curated Skill dispatcher for an empty role tool whitelist", async () => {
     queryMock.mockReturnValue(messages(assistantMessage("ok"), resultMessage("sdk-session-1")));
 
     await runAgent({
@@ -204,7 +205,7 @@ describe("runAgent", () => {
 
     expect(queryMock.mock.calls[0]?.[0]).toMatchObject({
       options: {
-        tools: [],
+        tools: ["Skill"],
         allowedTools: [],
       },
     });