What problem does it solve? Maintaining a curated set of third-party Claude Code skills requires tracking upstream changes without losing local adaptations. This Skill performs 3-way merges between pinned submodule commits, upstream HEAD, and the locally adapted payload, so vendored skills stay updatable when their source repositories move forward. ## Core Features & Use Cases - Vendoring: Copy a new skill from an upstream submodule into the payload, apply mechanical adaptations (rename, invocable), and record the pin in the manifest. - 3-way resync: Rebuild the merge base from the pinned commit and merge upstream changes into adapted files, reporting conflicts without advancing the pin until resolved. - Integrity verification: Run checks on frontmatter names, relative links, cross-skill path boundaries, upstream token denylists, and lock-file consistency. - Use Case: After upstream repositories publish updates, run the status and update commands to see which vendored skills are behind, merge the changes, and verify the payload before publishing a release. ## Quick Start Ask the AI to run the vendor-sync status command and update any vendored skills that are behind their upstream pins.