From Failure Mode to Skill Chain

TL;DR An agent leaked a hardcoded Slack channel ID by bypassing the scrub-and-publish skill and copying a local skill file directly — the PII scan never ran because the posting skill had no awareness