The practical wrinkle here is that agent skills are being packaged and passed around before the boring trust machinery looks settled. The retained material only preserves a claim that ClawHub, Cisco skill-scanner, and integrated scanners were bypassed, so click for the boundary problem rather than a grand incident story.