Review a skill-requested filesystem, command, network, secret, or destructive action against an explicit sandbox policy without executing it.