third_party/skill-repos/README.md

# Third-Party Agent Skills

To comply with third-party code policies, all remotely managed agent skills (installed via `npx skills`) must be isolated in this `third_party/skill-repos/` directory before being symlinked to specific project `.agents/skills` directories.

## Rules for Adding New Remote Skills

When adding a new remote skill, you must follow this exact structure and process:

1. **Folder per Repository:** Create a new folder under `third_party/skill-repos/` named uniquely after the GitHub repository the skill originates from (e.g., `third_party/skill-repos/dart-lang-skills`).

2. **Installation:** Run the `npx skills` command from *within* that new repository folder. This ensures the `skills-lock.json` file is correctly generated inside the subfolder. All `skills-lock.json` files must be generated by the CLI, not manually crafted.
   ```bash
   cd third_party/skill-repos/<repo-name>
   npx skills add <author/repo> --skill <skill-name> -y
   ```

3. **License Requirement:** You **must** download and retain the original `LICENSE` file from the remote repository and place it directly inside the `third_party/skill-repos/<repo-name>` subfolder.

4. **Symlinking:** Once installed, symlink the newly downloaded skill into the appropriate plugin's `.agents/skills` directory using a relative symlink.
   ```bash
   cd packages/<plugin-name>/.agents/skills
   ln -s ../../../../../third_party/skill-repos/<repo-name>/.agents/skills/<skill-name> <skill-name>
   ```