tools like LoadSkill and Agent are not well handled by default policy after clash init

[eliothedeman]

We should have some kind of pre-built "ReadOnly" tools lists that users can import in their policies, along with other named lists like "Agent", "Plugin" etc. Loading skill shouldn't be blocked by clash, and we need to make it clear to users how that setting is set.