Module skill_loader 

Tool executor that loads a full skill body by name, gated by the same trust-aware pipeline as invoke_skill.

SkillLoaderExecutor implements load_skill — a native tool the LLM can call to preview a skill’s full body without committing to follow it (unlike invoke_skill, which carries intent-to-apply semantics). Both tools share a SkillTrustGate (crate-private) built from the same trust_snapshot Arc, so they observe identical trust state within a turn:

• Non-Trusted bodies pass through sanitize_skill_text.
• Quarantined bodies are additionally wrapped with wrap_quarantined.
• Blocked skills are refused before any body read.
• skill_name is sanitized before it appears in any output path (found, blocked, not-found).

load_skill and invoke_skill are both listed in QUARANTINE_DENIED, so when a Quarantined skill is active the trust gate refuses both before this executor is reached.

Structs

LoadSkillParams

SkillLoaderExecutor

Tool executor that loads a full skill body by name from the shared registry.