To comply with third-party code policies, all remotely managed agent skills (installed via npx skills) must be isolated in this third_party/skill-repos/ directory before being symlinked to specific project .agents/skills directories.
When adding a new remote skill, you must follow this exact structure and process:
Folder per Repository: Create a new folder under third_party/skill-repos/ named uniquely after the GitHub repository the skill originates from (e.g., third_party/skill-repos/dart-lang-skills).
Installation: Run the npx skills command from within that new repository folder. This ensures the skills-lock.json file is correctly generated inside the subfolder. All skills-lock.json files must be generated by the CLI, not manually crafted.
cd third_party/skill-repos/<repo-name> npx skills add <author/repo> --skill <skill-name> -y
License Requirement: You must download and retain the original LICENSE file from the remote repository and place it directly inside the third_party/skill-repos/<repo-name> subfolder.
Symlinking: Once installed, symlink the newly downloaded skill into the appropriate plugin's .agents/skills directory using a relative symlink.
cd packages/<plugin-name>/.agents/skills ln -s ../../../../../third_party/skill-repos/<repo-name>/.agents/skills/<skill-name> <skill-name>