Skill runner should be handled separately

Summary

Skill runner is very annoying, no access to ~/.commandcode/skills on the agent. Too many access requests.

Expected Behavior

Seamless skill runs managed by the harness and not by LLM.

Actual Behavior

For some reason it skill calls fall back to bash cat ...,

 SHELL  [echo "===== to-spec ====="; cat ~/.commandcode/skills/to-spec/SKILL.md; echo; ls ~/.commandcode/skills/to-spec/]
 │ ===== to-spec =====
 │ ---
 │ name: to-spec

Steps to reproduce the issue

Call a skill in cmd from ~/.commandcode that calls other skills.

Command Code Version

1.38.2

Operating System

macOS

Terminal/IDE

VSCode

Shell

zsh

Session file (optional)

No response

Fix prompt (optional)

No response

Additional context

OS: macOS 27.0

首先复现来自 ~/.commandcode 中 cmd 的嵌套 skill 调用，并检查 skill 调用在何处回退到 cat 等 shell 命令。完成的标准是由 harness 处理 skills（包括嵌套调用），且不会反复请求访问权限，也不会执行由 LLM 生成的 shell 读取操作。