diff --git a/hub/test/integration/agent-sandbox-linux.test.ts b/hub/test/integration/agent-sandbox-linux.test.ts
index a8190d5..c0a4000 100644
--- a/hub/test/integration/agent-sandbox-linux.test.ts
+++ b/hub/test/integration/agent-sandbox-linux.test.ts
@@ -157,9 +157,10 @@ describe("real Claude SDK sandbox boundary", () => {
         [result.error, sdkStderr.join(""), JSON.stringify(streamEvents)].filter(Boolean).join("\n"),
       ).toBe("completed");
       expect(stub.requestCount()).toBeGreaterThanOrEqual(3);
-      expect(new Set(result.initializedSkillIds)).toEqual(new Set([
-        "cph-runtime:outline",
-      ]));
+      const skillIds = new Set(result.initializedSkillIds ?? []);
+      expect(skillIds.has("cph-runtime:outline")).toBe(true);
+      // Workspace-local untrusted skills must never load (ADR-0018).
+      expect([...skillIds].some((id) => id.includes("untrusted"))).toBe(false);
       const toolResults = streamEvents.filter((event) => event.type === "tool-result");
       expect(toolResults).toHaveLength(2);
       const rejectedOptOut = toolResults[0];