skill_trust

Approval overlay for a skill resolving outside trusted directories.

Dismisses with True when the user allows the resolved target and False when the user declines. Esc is treated as deny so the user is never forced into reading from an untrusted location they did not explicitly choose.

Typed bool | None rather than bool: a programmatic pop, or the app's priority Esc binding falling through to dismiss(None) (see action_cancel), can yield None. The caller collapses None and False to deny (if not allowed), so both dismiss values fail closed.