If one skill can tamper the whole system then, we are not doing the right thing by protecting the agent Infrastructure.